---
title: "Discussion on \"Exploiting JWT - Lack of Signature Verification\" | Hashnode"
description: "Discussion on \"Exploiting JWT - Lack of Signature Verification\". This writeup exploits a vulnerable JWT implementation by bypassing the signature verification to take over accounts."
url: "https://hashnode.com/posts/exploiting-jwt-lack-of-signature-verification/61fb9d7143e34d1181698ba3"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Exploiting JWT - Lack of Signature Verification](https://blog.dixitaditya.com/exploiting-jwt-lack-of-signature-verification?utm_source=hashnode&utm_medium=feed)

This writeup exploits a vulnerable JWT implementation by bypassing the signature verification to take over accounts.

Aug 6, 2020 · 3 min read · blog.dixitaditya.com  
Read the article

-   [#jwt](https://hashnode.com/tag/jwt)
-   [#tutorial](https://hashnode.com/tag/tutorial)

## Written by

[Aditya Dixit](https://hashnode.com/@adityadixit)

@adityadixit · India

  
[View profile](https://hashnode.com/@adityadixit)

Security Researcher

I'm leading the Research at Credshields, and Pentest teams at Cobalt Labs and HackerOne. I occasionally blog about my findings and adventures in pentesting.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.