Clickjacking
Medium · Clickjacking

OAuth Consent Under Glass

WorkPort's OAuth consent screen can be embedded. An external productivity site hides the Allow access control under a harmless-looking template button.

Objective

Grant the third-party application access through UI redressing.

Target

WorkPort / PerkBox

Launch target

Submit flag