webmedium

Moment s JWT (JWT Moment)

hackerlab

Task: bypass JWT authentication on a FastAPI application to gain admin access. Solution: exploit JWT algorithm confusion (CVE-2016-10555) by switching from RS256 to HS256 and signing with the public key, which the server uses as the HMAC secret.

$ ls tags/ techniques/
jwtfastapiauthentication_bypasspythontoken_forgeryhs256algorithm_confusionrs256cve_2016_10555pyjwtpublic_key_as_secret
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]