Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Real-life OIDC Security (III): CRLF Injections


Nachrichtenbereich: 🕵️ Hacking
🔗 Quelle: security.lauritz-holtmann.de

This is the third post of a series on Single Sign-On and OpenID Connect 1.0 security. In this post, a more common CRLF injection in the context of OIDC is discussed in detail. We present issues... [Weiterlesen]

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🔧 Hunting Coyote: A Full Analysis of the 0LIONW0 AutoIt3 RAT


📈 679.48 Punkte
🔧 Programmierung

🔧 Cross-Cloud Authentication in Kubernetes: A Comprehensive Guide to IRSA, Workload Identity, and Federated Identity


📈 532.51 Punkte
🔧 Programmierung

🔧 OpenID Connect Core 1.0 Deep Dive: Understanding the "Authentication" Layer on top of OAuth 2.0


📈 476.03 Punkte
🔧 Programmierung

🔧 Solving Azure Authentication for Crossplane: Three Real-World Scenarios


📈 410.74 Punkte
🔧 Programmierung

🔧 Self-Hosting n8n on AWS ECS Fargate with Terraform, Okta OIDC SSO and a Shared ALB + RDS


📈 364.42 Punkte
🔧 Programmierung

🔧 Auth0 AWS Amplify Gen2: OIDC Authorization for AppSync via Identity Pool Federation


📈 333.48 Punkte
🔧 Programmierung

🔧 End-to-End GitHub Security Hardening Guide for Organizations


📈 330.29 Punkte
🔧 Programmierung

🔧 組織向け GitHub セキュリティ・ハードニング完全ガイド


📈 321.74 Punkte
🔧 Programmierung

🔧 Stop Trusting Every JWT: How I Handle OIDC Claims in My Go Gateway


📈 316.76 Punkte
🔧 Programmierung

🔧 Accessing AWS in Github Actions Using OIDC


📈 277.9 Punkte
🔧 Programmierung

🔧 Auth Strategies: The Right Tool for the Right Scenario


📈 266.13 Punkte
🔧 Programmierung

🔧 Different Ways to Manage AWS IAM to Connect to an EKS Cluster


📈 260.73 Punkte
🔧 Programmierung

🔧 Add Authentication and SSO to Your Shiny App


📈 259.83 Punkte
🔧 Programmierung

🔧 Using OIDC with .NET to connect to MongoDB Atlas


📈 241.75 Punkte
🔧 Programmierung

🔧 Hashicorp Vault CLI Part 7: Authentication


📈 240.85 Punkte
🔧 Programmierung

🔧 Converting Windows Text to Linux Format


📈 234.57 Punkte
🔧 Programmierung

🔧 Signing Container Images with Cosign


📈 232.49 Punkte
🔧 Programmierung

🔧 Agent2Agent Protocol, IBM Vault, & OAuth 2.0 On-Behalf-Of


📈 232.04 Punkte
🔧 Programmierung

📰 CODESYS in Festo Automation Suite


📈 227.72 Punkte
📰 IT Security Nachrichten

🔧 Unlocking Seamless & Secure Access: Introducing Generalized OIDC Authentication in Apache DolphinScheduler


📈 216.21 Punkte
🔧 Programmierung

🔧 Picking the Right Auth Protocol: OAuth2, OIDC, or SAML?


📈 214.86 Punkte
🔧 Programmierung

🔧 Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification


📈 214.41 Punkte
🔧 Programmierung

🔧 More OpenID Federation with pac4j and Connect2id


📈 213.06 Punkte
🔧 Programmierung

🔧 Stop Using AWS Access Keys in GitHub Actions: The OIDC Guide You Need


📈 207.4 Punkte
🔧 Programmierung

🔧 SSO, SAML, OIDC, and SCIM: What Actually Happens When You Click "Sign in with Google"


📈 206.5 Punkte
🔧 Programmierung

🔧 The Twilio-Stytch Acquisition: A Technical Analysis of Developer CIAM in 2025


📈 195.43 Punkte
🔧 Programmierung

🔧 Least-Privilege CI/CD on AWS: The 4-Layer Pattern That Scales to 200 Pipelines


📈 191.12 Punkte
🔧 Programmierung

🔧 Authorization methods in .NET microservices


📈 187.52 Punkte
🔧 Programmierung

🔧 Making OAuth Testable: Rethinking OIDC Clients in JavaScript


📈 186.62 Punkte
🔧 Programmierung

💾 3.0.0-20260331


📈 186.32 Punkte
💾 IT Security Tools

🔧 Request Smuggling vs Request Splitting in Spring Boot


📈 186.09 Punkte
🔧 Programmierung

🔧 How to Enable Google OIDC Login in Vault Using Helm and Terraform


📈 185.72 Punkte
🔧 Programmierung

🔧 The 20-Minute Compromise: CI/CD Audit Guide for the TanStack Supply Chain Attack


📈 185.72 Punkte
🔧 Programmierung

🔧 GitHub Actions for HIPAA-compliant deployments


📈 180.96 Punkte
🔧 Programmierung

🔧 Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After [email protected]


📈 172.14 Punkte
🔧 Programmierung