The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

SSRF via OpenID dynamic client registration

Ivan | Last updated: Dec 09, 2021 03:07PM UTC

Dear Portswigger support, I have hard times getting through the lab. this JSON sent to the /reg endpoint: POST /reg HTTP/1.1 Host: oauth-acf01f431f25df1fc07c2d3502f5009a.web-security-academy.net Content-Length: 72 { "redirect_uris": [ "http://artsploit.com/redirect" ] } Always gives: {"error":"invalid_redirect_uri","error_description":"redirect_uris is mandatory property"} But the json validator says it's ok. And the redirect_uri is in there. Please advise. Thank you, Ivan

Ivan | Last updated: Dec 09, 2021 03:49PM UTC