JSON Web Token (JWT) Exploit with SQL Injection | CTF Walkthrough

In this video walk-through, we covered exploiting vulnerable implementation of JWT tokens encryption along with SQL injection as part of HTB under construction under the beginner track.
**********
Receive Cyber Security Field Notes and Special Training Videos
/ @motasemhamdan
*******
Instagram
/ dev.stuxnet
Twitter
/ manmotasem
Facebook
/ motasemhamdantty
LinkedIn
[1]: / motasem-hamdan-7673289b
[2]: / motasem-eldad-ha-bb424...
Website
www.motasem-no...
Patreon
www.patreon.co...
Backup channel
/ @themastermindclips
My Movie channel:
/ @certificates-reviews
******

[@RearAdmiralNashiba]

Having tried a number of walkthroughs for this challenge, this was the only one to render the steps clear and straightforward. Subscription earned.

[@MotasemHamdan]

Thanks !

[@blackthorne-rose]

Yours was the only walkthrough or writeup i could find that wasn't a virtual minefield of incomplete or incorrect procedures and misleading statements. Kudos! I'll be checking out your channel to keep learning!

[@Muh4nn4D]

محتواك رهييب استفد كثير منك شكرا لك

[@mkowalski997]

Great explained, thank you for the lesson.

[@JohnSmith-wz7he]

Brilliant Work! thank you very much

[@herllo2u2]

You can print the public key in python and it will convert the into new lines for you.

[@tylertbone9]

15:34 "what the shit man" I felt that

[@MotasemHamdan]

:)

[@aMODiEswede]

LOL

[@ismailarame3756]

nadi canadi

[@SuperMercadier]

Hey Motasem Hamdan I'm get 500 error with generated token. Other users have same problem. I don't understand what I did wrong... 😕

[@johnnyromein3917]

I have tried to replicate and keep getting a 500 error as soon as i use a generated token. o\ thx for showing that it can work though.

[@anthonyn189]

I was having the same issue. My problem was forgetting to add the query terminator "--" at the end of the query before converting it to a token.

[@SuperMercadier]

I'm still having problems with this. Did you find out how to solve it?

[@SuperMercadier]

@@anthonyn189 Where do I put this "--" exactly?

[@ffenixx]

@@SuperMercadier the key must end with -----END PUBLIC KEY----- and check if you have another empty line after this line. Linux sometimes wants a blank line at the end of a file/command

[@infosec1065]

@@ffenixx yep that worked for me

[@user-fn4dt9sk7s]

awesome video!, keep it up