Attack Vector Scenarios
Scenario 1 of 5
Simulation Step Execution Log
READY Click 'Execute Attack Simulation' to trace interactive packet vectors.
Scenario: Redirect URI Manipulation
GET /authorize?response_type=code&client_id=app-client-99&redirect_uri=https%3A%2F%2Fmyapp.com.attacker.com%2Fcallback HTTP/1.1 Host: auth-server.com User-Agent: Mozilla/5.0
HTTP/1.1 302 Found Location: https://myapp.com.attacker.com/callback?code=spl_auth_code_982341 Cache-Control: no-store
Actionable Remediation Required
Enforce exact string comparison on redirect_uri parameter as mandated by OAuth 2.1. Disallow wildcard or domain prefix matching on the authorization server.
RFC Compliance & Attack Mitigation Diagnostic Matrix
Evaluated standards: RFC 6749, RFC 7636, OAuth 2.1 Draft
| Vector Scenario | RFC Specification | Observed Flow Defense | Compliance Check | Actionable Safeguard |
|---|