Open Redirect to Login Bypass Challenge in OopsSec Store

Challenge 5/35 · Broken Access Control. Open redirect to login bypass. Easy · Input Validation · 20–30 min. Exploit an unvalidated redirect parameter on OopsSec Store's login page to reach a restricted internal OAuth callback endpoint. Spin up the lab: npx create-oss-store my-ctf-lab. See it on the roadmap: https://koadt.github.io/oss-oopssec-store/roadmap#challenge-05. Walkthrough — spoilers, read it once you are stuck: https://koadt.github.io/oss-oopssec-store/posts/open-redirect-login-bypass. Star OopsSec Store on GitHub: https://github.com/kOaDT/oss-oopssec-store.