webPromedium
Moment s JWT (JWT Moment)
hackerlab
Task: bypass JWT authentication on a FastAPI application to gain admin access. Solution: exploit JWT algorithm confusion (CVE-2016-10555) by switching from RS256 to HS256 and signing with the public key, which the server uses as the HMAC secret.
$ ls tags/ techniques/
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Разминка с JWT (JWT Warmup)— hackerlab
- [web][Pro]rigidType— hackerlab
- [web][Pro]Лысина админа (Admin's Bald Head)— duckerz
- [web][Pro]Lab 354 — VaultAPI — JWT Authentication Bypass via JWE-Wrapped PlainJWT— hackadvisor
- [web][Pro]UUIDY— duckerz