[Mission] OAuth SSO Identity Provider

🎯 OAuth SSO Identity Provider (General · Level 1 · +50 XP)

A mock Single Sign-On (SSO) provider allows open redirect URLs in client registration and fails to validate the state parameter, enabling OAuth replay attacks.

Learning & Defense Goals:

🎯 Launch Isolated Sandbox on Cyber Lab →

Community Discussion Rules: Discuss methodologies, discovery tactics, and architectural hardening. Please do not post raw flags directly. Share your production remediation code!