WHOAMI
- Robemar Aviles
Tryhackme
- View
Hack the box
- View
Academy HTB
- View
Over The Wire
- View
  - Bandit
    Level 0
    Level 1
    Level 2
    Level 3
    Level 4
    Level 5
    Level 6
    Level 7
    Level 8
    Level 9
    Level 10
    Level 11
    Level 12
Under The Wire
- View
PicoCTF
- View
Portswigger
- View
Hacker101
- View
  - Micro-CMS v1
  - Trivial
Python
- View
  - Files
    Number 1 to 100
  - Hackerrank
    Power - Mod Power
    Mod Divmod
    String Split and Join
    What's Your Name?
    Find the Runner-Up Score!
    Print Function
    Loops
    Division
    Arithmetic
    Python If-Else
    Hello World
SQL
- View
  - Hackerrank
    Higher Than 75 Marks
    Weather Observation Station 1
    Weather Observation Station 3
    Weather Observation Station 4
    Select By ID
    Select All
    Revising the Select Query II
    Revising the Select Query I
    Japanese Cities' Attributes
    Japanese Cities' Name
Notes
- View
Commands
- View
Google Chrome Password
- Decrypt Google Chrome Password
- LaZagne
Comptia Security+ 701
CCNA
Malware Analysis Lab
TCM

Powered by GitBook

On this page

TCM

Practical Web Hacking

JWTs

Lab: JWT authentication bypass via unverified signature

Previousjwt.io NextLab: JWT authentication bypass via flawed signature verification

Last updated 6 months ago

see the request

sent it to repeater

remove the /myaccount?id=wiener to /myaccount

see the jwt

from wiener to administrator

now we can access the admin panel

paste the session token in the browser

visit the admin accout

delete the carlos user in admin panel