The JWT "none" attack still works way more often than it should 😅
Delete the signature, set alg to "none", and some servers just... believe you.
Did it 3 ways in the new video - Burp, jwt_tool & JWT Hunter 👇
#bugbounty#jwtyoutu.be/D47lqPF8YgU
Dropped episode 3 of my JWT pentesting series. This one's just the tools + labs I actually use for JWT testing, all free.
Follow for more on pentesting and bug bounty hunting
Handy if you're starting out. 👇🏻
youtu.be/ewJ4F3QKU3o?si…
🔑JWTs are everywhere. But are yours secure?
I just dropped the ultimate guide: AppSec All-in-One series 📚. From stripping signatures to kid injection.
#AppSec#BugBounty#Infosec#Hacking#JWT
Just this is blog is enough to know in and out. 👇
🔗 dedefence.io/appsec-all-in-…
7K Followers 3K Followingxss0r
Deploying an alert box in a web app is like having a tiny pop-up comedian shout 'Surprise!' whenever you least expect it!
#xss0r #ibrahimXSS #Blindxss0r
147 Followers 1K FollowingOpen-Source system dev & security - Help with cloud native and on-premise automation - Always ready to share scientific knowledge
60 Followers 2K FollowingHi,I am a Freelance Web Pentester
self-taught since 2013.
In the future
I plan to take Certified CEH,,
Bismillah
Someone lahir 2004 , Religius,
Akhwat Mode