Search for a command to run...
Series
Building a Flask API with JWT authentication from scratch, then breaking it six different ways — alg none bypass, HMAC brute force, kid injection, JWKS spoofing, token replay, and RS256/HS256 confusion. Each attack fixed with an explanation of why it exists at the JWT spec level.
Part 1 of a series where I build a Flask API with JWT authentication, then deliberately exploit six real vulnerabilities in it — documenting why each one exists at the JWT specification level, not jus
Part 2 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. In Part 1, the project got its foundation — a Flask app, an isolated envir
Part 3 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 2 covered what a JWT actually is and how one gets issued. This part p
Part 4 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 3 fixed the alg: none bypass by explicitly restricting which algorith
Part 5 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 4 cracked a weak HMAC secret offline with hashcat. This part doesn't
Part 6 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 5 exploited kid to point a local file lookup somewhere unintended. Th
