JWT Authentication Bypass via jku Header Injection

[@halwest05]

Nicely explained. At 9:05 the reason it redirected to login page was that you requested "/my-account?id=wiener" while you were the administrator.

[@intigriti]

Ahhh typical! ty 😆

[@latesthitstch9428]

👨‍💻 good one there

[@intigriti]

🙏

[@jaihojaiho2774]

hi @intigriti when will be the remaining sections video will be coming like confusion algorithm

[@intigriti]

Hey! Don't worry, they haven't been forgotten 🙂 We're working on a couple of other projects atm which have taken up some time *but* the next JWT videos will be added in the coming months (I also need to buy a burp pro license for them 😹)

[@jaihojaiho2774]

@@intigriti Frankly you people did very very awsme job...

[@noormohammadgagguturi]

1st Comment

[@intigriti]

🏆

[@deadbeef2482]

4th comment