OAuth Silent Redirection Probe

Kaung Khant Ko@kaungkhantko

•updated Mar 4, 2026•19•0•385

Detects OAuth authorization requests to Microsoft or Google that use the 'prompt=none' parameter in combination with an intentionally invalid or missing 'scope'. This combination is used to force a silent error redirect to an attacker-controlled URI, bypassing some security filters.