SecNet.WorkAcademy
What would you like to learn?Sign inRegister
‹ Back to course catalogue
Intermediate · TR / EN

OAuth Consent Phishing and Device-Code Defence

Validate applications, scopes, flow intent and resource access even on genuine provider screens.

3 modules · 8 lessonsVerifiable course certificate
SecNet Academy
Intermediate · 14 estimated study hours

Prepare for this course

Recommended learning order, not an enrollment gate. Expert describes the Academy course difficulty.

  1. Identity and Access Management Fundamentals
  2. Incident Response Fundamentals

Capstone: case analysis, test/evidence pack and a justified acceptance or rejection. Exercises use synthetic data; the final passing standard is 80%.

Applied capstone case

Capstone: a changed password and continuing app access

In the final lesson, examine fictional workplace data, prepare a decision dossier and compare your calculations with an explained solution. Includes a process map, data chart and blank workbook.

Open capstone lesson

Curriculum

Learn at your own pace

Scope, mechanisms and design

0/3 completed
1Do not collapse different events into one MFA-bypass labelOpen lesson2Read application identity, ownership and data scope rather than its nameOpen lesson3A genuine provider screen does not guarantee a trustworthy appOpen lesson

A five-question quiz follows this module.

Module quizzes

Final exam

Meet the required proficiency standard to earn your course certificate.

Academy finals require 80%; official exam requirements are assessed separately.