Craft a fake OAuth 2.0 consent screen that mimics a legitimate Google service but requests excessive or unusual permissions. Monitor interactions with this screen to identify attackers attempting to trick users into granting unauthorized access.
Tag: OAuth 2.0
Fake OAuth 2.0 Server
Goal: To gather information about attackers attempting to exploit OAuth 2.0 vulnerabilities and detect their presence.
Approach: Monitoring access to the fake OAuth 2.0 server and analyzing attacker behavior.
Attackers who attempt to use the fake OAuth 2.0 server for authentication or authorization will be misled, and their actions will be logged.