QRLJacking Attack Vector
Description: QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on “Login with QR code” feature as a secure way to login into accounts. In a simple way, In a nutshell victim scans the attacker’s QR code results of session hijacking.
Project Leader:
Mohamed A. Baset (@SymbianSyMoh)
Links:
https://www.owasp.org/index.php/Qrljackinghttps://github.com/OWASP/QRLJacking