Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: SSRF via OpenID dynamic client registration missing /.well-known

Tom | Last updated: Dec 28, 2020 07:54AM UTC

Hi there, I am doing the OpenID labs and had a good idea where to look for the OAuth configuration files. Seeing them missing, I had a peek at the solution. The solution also suggested to look at the URL I had in mind for the configuration, but the server still serves a 404 Not Found. I am talking about the lab: https://portswigger.net/web-security/oauth/openid/lab-oauth-ssrf-via-openid-dynamic-client-registration. Can someone have a look or confirm that I am perhaps incorrect?

Ben, PortSwigger Agent | Last updated: Jan 05, 2021 01:58PM UTC