JSON Web Token (JWT) Exploit with SQL Injection | CTF Walkthrough

[@blackthorne-rose]

Yours was the only walkthrough or writeup i could find that wasn't a virtual minefield of incomplete or incorrect procedures and misleading statements. Kudos! I'll be checking out your channel to keep learning!

[@RearAdmiralNashiba]

Having tried a number of walkthroughs for this challenge, this was the only one to render the steps clear and straightforward. Subscription earned.

[@MotasemHamdan]

Thanks !

[@herllo2u2]

You can print the public key in python and it will convert the into new lines for you.

[@JohnSmith-wz7he]

Brilliant Work! thank you very much

[@mkowalski997]

Great explained, thank you for the lesson.

[@Muh4nn4D]

محتواك رهييب استفد كثير منك شكرا لك

[@SuperMercadier]

Hey Motasem Hamdan I'm get 500 error with generated token. Other users have same problem. I don't understand what I did wrong... 😕

[@tylertbone9]

15:34 "what the shit man" I felt that

[@MotasemHamdan]

:)

[@aMODiEswede]

LOL

[@ismailarame3756]

nadi canadi

[@johnnyromein3917]

I have tried to replicate and keep getting a 500 error as soon as i use a generated token. o\ thx for showing that it can work though.

[@anthonyn189]

I was having the same issue. My problem was forgetting to add the query terminator "--" at the end of the query before converting it to a token.

[@SuperMercadier]

I'm still having problems with this. Did you find out how to solve it?

[@SuperMercadier]

@@anthonyn189 Where do I put this "--" exactly?

[@ffenixx]

@@SuperMercadier the key must end with -----END PUBLIC KEY----- and check if you have another empty line after this line. Linux sometimes wants a blank line at the end of a file/command

[@infosec1065]

@@ffenixx yep that worked for me

[@אורגוזלן-י3ב]

awesome video!, keep it up