JWT Authentication Bypass via Unverified Signature

[@oneloveafrica8860]

u are doing good in binary exploit and web pentest

[@intigriti]

🥰

[@camelotenglishtuition6394]

Tokens: Because putting all of your credentials in one place and relying on correct implementation has never gone wrong. Ever. Promise.

[@intigriti]

😂👌

[@nishantdalvi9470]

Superb content : )

[@intigriti]

Thank you! 🙏🥰

[@T-FLAG]

finally the jwt request is not shown in brup🤨

[@intigriti]

In the video? What info are you missing?

[@T-FLAG]

@@intigritiWhere is_Admin is being injected: true in signature? or in payload

[@intigriti]

It would be in the payload, then the signature is generated from that payload, using a private key.

[@T-FLAG]

@@intigriti Thanks 👌Happy Hacking

[@nisantha2162]

why its not login for wiener:peter this given cred

[@intigriti]

Maybe testing you.. 😅

[@babeguesswhoami]

thank you and ut video,I get it

[@intigriti]

You're welcome! 💜