fevar54/cve-2025-4679-secureoauth-demo---enfoque-educativoIsolated educational lab simulating CVE-2025-4679 OAuth credential exposure. Learn offensive and defensive security through hands-on exercises, traffic analysis, and CTF challenges in a 100% safe environment.
A safe, isolated environment to learn about OAuth vulnerabilities without risking real systems
🚀 Quick Start | 📚 Learning Path | 🛡️ Safe Environment | 👥 Contributors
This educational laboratory simulates the CVE-2025-4679 vulnerability discovered in Synology's Active Backup for Microsoft 365, where client secrets were exposed in HTTP redirects. The lab provides a 100% safe environment to understand, analyze, and learn from this critical security flaw.
⚠️ IMPORTANT: This is an EDUCATIONAL TOOL ONLY. It contains NO real credentials, does NOT connect to real services, and is designed for LEGITIMATE security training.
By completing this lab, you will:
| Feature | Protection | Purpose |
|---|---|---|
| Isolated Network | No internet connection required | Prevents accidental exposure |
| Fake Credentials | demo_ prefix on all values | No risk if leaked |
| Localhost Only | 127.0.0.1 binding | No external accessibility |
| Auto-cleanup | Session data deleted on exit | No persistent sensitive data |
# Clone the repository
git clone https://github.com/yourusername/oauth-security-lab.git
cd oauth-security-lab
# Create virtual environment
python -m venv venv
# Activate (Linux/Mac)
source venv/bin/activate
# Activate (Windows)
venv\Scripts\activate
# Install dependencies
pip install -r requirements.txt
# Launch the lab
python main.py