Pentesting JWTs: Cracking weak keys using JWT_TOOL

Ali Issa · Intermediate ·🔧 Backend Engineering ·2y ago

Skills: Security Basics80%Ethical Hacking & Pen Testing70%

Key Takeaways

This video teaches how to crack weak keys in JSON Web Tokens using JWT_TOOL

Original Description

In this video we are performing a penetrationtest of a JWT by cracking its weak password. More specifically we are solving a #portswigger lab titled JWT authentication bypass via weak signing key using a popular tool called #JWT_Tool. Please note that this content is purely educational and targeted towards software engineers and security professionals to educate them on how to find and address vulnerabilities in web applications. Please act responsibly. #burpsuite #portswigger #pentest #JWT_tool #bugbounty #jsonwebtoken #jwt

Watch on YouTube ↗ (saves to browser)

Sign in to unlock AI tutor explanation · ⚡30

More on: Security Basics

View skill →

HackTheBox - Analytics

HackTheBox - Analytics

AWS Security Agent (Preview) Overview - Frontier Agent for Proactive AppSec | Amazon Web Services

AWS Security Agent (Preview) Overview - Frontier Agent for Proactive AppSec | Amazon Web Services

Amazon Web Services

HOW FRCKN' HARD IS IT TO UNDERSTAND A URL?! - uXSS CVE-2018-6128

HOW FRCKN' HARD IS IT TO UNDERSTAND A URL?! - uXSS CVE-2018-6128

Bruteforce 32bit Stack Cookie. stack0: part 3 - bin 0x23

Bruteforce 32bit Stack Cookie. stack0: part 3 - bin 0x23

Configure and Deploy AWS Client VPN

Configure and Deploy AWS Client VPN

TryHackMe! Advent of Cyber - 2021 KICKOFF: 25 Days of Learning CYBERSECURITY

TryHackMe! Advent of Cyber - 2021 KICKOFF: 25 Days of Learning CYBERSECURITY

Related Reads

Node.js Error Handling Patterns for Production Queue Systems

Learn effective Node.js error handling patterns for production queue systems to ensure reliability and scalability

Dev.to · Faisal Nadeem

Make Your CLI Config Write Survive Ctrl-C Without Leaving Truncated JSON

Learn to preserve CLI config integrity by handling Ctrl-C interruptions without leaving truncated JSON

Dev.to · Sam Rivera

Code Review Habits That Actually Stick

Improve code quality with effective code review habits that stick

Dev.to · Code Atlas

Timeout Tuning for Proxy-Routed Requests: Why Default Values Are Almost Always Wrong

Learn how to tune timeouts for proxy-routed requests to improve performance and reliability

Dev.to · Sota Support

/dev/push: An Open Vercel Alternative to Ship Your Apps Quickly