How to Exploit "Json Web Token"(JWT) vulnerabilities | Full Practical

[@LinuxSploitOfficial]

Become Part of LinuxSploit by clicking SUBSCRIBE button

[@marshal_demi]

Thanks, Boss. The first part helped me in a CTF

[@LinuxSploitOfficial]

Glad to hear that it was helpful for your CTF

[@corpsecoder5216]

This is awesome you went into depth on how Jwt works thank you

[@LinuxSploitOfficial]

Glad it was helpful!

[@corpsecoder5216]

@@LinuxSploitOfficial Yea your the only you tuber that goes into details of the attack also can you do a vid on linux enumeration bless you

[@sushantkamble004]

Superb explanation bro need more videos on these critical bugs 👍🏻

[@LinuxSploitOfficial]

Sure

[@jerrytech1901]

thanks, man....waiting for more videos like this...

[@LinuxSploitOfficial]

Glad you liked it

[@StudiofrogPl]

amazing stuff, thank you.

[@LinuxSploitOfficial]

You're welcome! I'm glad you like it.

[@syedpc7833]

WELL EXPLAINED!

[@LinuxSploitOfficial]

Thanks 💜💜💜

[@Sstrik]

Perfect video

[@LinuxSploitOfficial]

Glad you think so!

[@sushantdhopat]

Amazing video!👍

[@LinuxSploitOfficial]

Thank you! 👍

[@grgnizz]

great content,subscribed, hope to see the same quality content

[@LinuxSploitOfficial]

Thanks and sure

[@kietpoki3]

thank, really useful

[@LinuxSploitOfficial]

Glad you liked it

[@flippy3461]

Great content, keep it up.

[@LinuxSploitOfficial]

Appreciate it!

[@FauziBhai]

Great video

[@LinuxSploitOfficial]

Thanks for the visit

[@FauziBhai]

@@LinuxSploitOfficial Keep it up great learning content. Now bro making video on DOM XSS because its so confusing.

[@dr_tomato771]

When i write the same python code 4:09 in Window i get another output . Idk why ! :(

[@LinuxSploitOfficial]

you also need public key to generate valid token,
here is the script: github.com/farah-hawa/Jwt-code

[@vishalkothari8065]

Where can we get the public key in order to get the admin token ?

[@LinuxSploitOfficial]

It could be exposed in JavaScript or exposed like www.example.com/secret/key.pub . waybackurl, gobuster could be helpful to find it.

[@vishalkothari8065]

@@LinuxSploitOfficial okay, just a request if u can address in any of your upcoming video how to protect it as a part of software development is concerned, so as to avoid its exploitation. Like that would be great 🔥

[@smandoece]

Thank you for your video, it is really helpful! If we want to make the python script appropriate for RS256 algorithm encryption, not HS256, what modules should we use and how should we modify the code in order to produce the corresponding signature? Thanks a lot.

[@c09yc47]

Which lab are you using

[@LinuxSploitOfficial]

LAB: github.com/h-a-c/jwt-lab​

[@macspexs7710]

Are there any online websites or tools that can convert RSA to HMAC JSON Token

[@LinuxSploitOfficial]

Python Code used to generate signature: github.com/farah-hawa/Jwt-code

[@healthplus8073]

Please Can you host the code that used to crack the jwt ??

[@LinuxSploitOfficial]

LAB: github.com/h-a-c/jwt-lab​ Code used to generate signature: github.com/farah-hawa/Jwt-code​

[@healthplus8073]

@@LinuxSploitOfficial Thank You

[@anik6393]

Well done bro❤️make more bro

[@LinuxSploitOfficial]

Thanks and sure

[@Hackedpw]

Ok

[@borderline7742]

impossible to watch with annoying robot voice

[@LinuxSploitOfficial]

I apologize for the inconvenience caused by the annoying robot voice. Should i considered trying out wellsaidlabs.com/ for a more realistic AI voice over for my RUclips content?
Please let me know what you think about it.