Forged Handshake

Every authentication system in the world relies on protocols that were designed for a more trusting era. OAuth 2.0, SAML, OpenID Connect, Kerberos, JWT — these are the backbone of modern identity, and they are being bypassed at scale. Forged Handshake is the complete reference on authentication protocol attacks and the defenses that actually work. Written by Imad Muratspahic, it covers OAuth token...