Hack JWTs with Burp Suite | Web Security Academy

In this video, I talk about JSON Web Tokens (JWTs) and I solve the first JWT Attack lab in the Portswigger Web Security Academy. Let me know if you want me to do another video on JWT Attacks and solve one of the more complicated lab.
Check out the lab here: portswigger.net/web-security/...
Check out my blog here:
corsecure.blog

[@amyt5031]

So helpful! Thanks for the information

[@cedricflutter311]

Please more vids you are great

[@CorSecure]

working on it! :)

[@valona4432]

Your good bro make more videos like this please dont chamge the format becose the videos are clearly and can be understood easily

[@whatsup5442]

Yo bro, do you any idea how I can decrypt SPI token? I really need help with this.

[@technoindia786]

ssl unpinning frida is work run time process How to set ssl unpinning permanently in apk ? frida ssl unpin can be made permanent in apk So that he doesn't have to do Frida's again to again and without root also gets ssl bypassed.

[@CorSecure]

The best way I know how to do this would be to patch the apk with Objection. You will still need to run Objection every time to bypass SSL pinning, but you won't have to hook the binary with Frida because the Frida gadget will already be built into the binary. I have a video on my channel showing how to do this: kzbin.info/www/bejne/p5Ktc4qZqsp2f6M I don't know of a way to permanently bypass SSL pinning without heavily editing the source code of the apk to remove the pinning mechanism entirely, which would require some pretty extensive reverse engineering.