# OhMyQR | Hijack Services That Relies On QR Code Authentication

**URL:** <https://onehack.st/t/ohmyqr-hijack-services-that-relies-on-qr-code-authentication/88564>\
**Category:** Tools & Scripts\
**Tags:** hacking\
**Created:** [May 27, 2020, 12:46pm UTC](https://onehack.st/t/ohmyqr-hijack-services-that-relies-on-qr-code-authentication/88564 "2020-05-27T12:46:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hyperdemongod](https://onehack.st/user_avatar/onehack.st/hyperdemongod/32/26170_2.png) [@Hyperdemongod](https://onehack.st/u/Hyperdemongod)\
**Post date:** [May 27, 2020, 12:46pm UTC](https://onehack.st/t/ohmyqr-hijack-services-that-relies-on-qr-code-authentication/88564/1 "2020-05-27T12:46:23Z")

</div>

QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on the “Login with QR code” feature as a secure way to login into accounts. In a nutshell, the victim scans the attacker’s QR code which results in session hijacking.

[![qr](https://user-images.githubusercontent.com/34893261/80925650-01879780-8d68-11ea-9328-5896af680018.png)](https://user-images.githubusercontent.com/34893261/80925650-01879780-8d68-11ea-9328-5896af680018.png)

### Features:

Port Forwarding using Ngrok

## Legal disclaimer:

Usage of OhMyQR for attacking targets without prior mutual consent is illegal. It’s the end user’s responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

### Usage:

```auto
git clone https://github.com/thelinuxchoice/ohmyqr
cd ohmyqr
bash ohmyqr.sh

```

Source:

[https://github.com/thelinuxchoice/ohmyqr](https://github.com/thelinuxchoice/ohmyqr)