0x1C Wellington Meetup: Understanding and Hacking OAuth 2.0 and OpenID Connect

We’re excited to bring another interactive Hack the Box (HTB) meetup to Wellington!

We've all heard and probably interacted with OAuth 2.0/OpenID Connect, but the nuances of how it all comes together can be a bit mystifying! In this talk, we'll go over some of the common flows of OAuth 2.0/OpenID Connect, discuss some of the intricacies of the standard, and identify common mistakes you'll find in the wild.

WHAT TO EXPECT

• A hands-on, guided walk through to solve a machine yourself.
• A presentation on the key concepts, penetration testing tools, and recommended remediation.

WHAT YOU GET

• FREE HTB SWAG/GIVEAWAYS
• FREE access to labs during the event

WHAT YOU NEED

• A laptop
• A PortSwigger account
• Discord application

HOUSE RULES

• Follow all rules and guidelines in the HTB TOS: HTB Terms of Service
• Active HTB content cannot be shared publicly. Retired challenges or machines are fair game.

EVENT DETAILS

• Date: Tuesday, April 28th, 2026
• Time: 5:30 PM (NZDT)
• Location: CyberCX, Level 10, 10 Brandon Street, Wellington
• Attendee limit: 25 + speakers, and hosts.

ADDITIONAL NOTES

• Join our Discord for event updates
• Parking is not available at the location.

CODE OF CONDUCT
We strive to create a safe, welcoming, and inclusive environment for all attendees. To ensure a positive experience for everyone, the following behaviors are strictly prohibited:

• Smoking
• Drinking alcohol
• Any form of discrimination or racism
• Any other forms of misconduct

Any attendee found engaging in these behaviours will be immediately banned and permanently removed from the group. Thank you for helping us maintain a respectful and enjoyable atmosphere for all.