Exploiting JWT - Lack of Signature Verification
This writeup exploits a vulnerable JWT implementation by bypassing the signature verification to take over accounts.
Written by
Security Researcher
I'm leading the Research at Credshields, and Pentest teams at Cobalt Labs and HackerOne. I occasionally blog about my findings and adventures in pentesting.
Responses
Markdown supported · ⌘↵ to post
No responses yet.