#jwt

Articles tagged with #jwt

Building a Concurrent JWT Validator in Go — and What It Taught Me About Go's Concurrency Model
Draft note: being written stage by stage as the project progresses. Sections below will grow; this note comes out before publishing. A companion build to JWT Attack Lab — eight parts spent breaking a
Sep 15, 20266 min read
JWT Attack Lab — Part 8: Algorithm Confusion, and a Bug the Attack Uncovered By Accident
Part 8, the final stage in a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 7 closed a gap in expiry enforcement. This last stag
Jul 18, 20265 min read2
JWT Attack Lab — Part 7: When exp Isn't Actually Enforced Everywhere
Part 7 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 6 spoofed a JWKS URL to bypass RS256 verification entirely. This part
Jul 18, 20264 min read1
JWT Attack Lab — Part 6: Spoofing the JWKS URL an RSA Verifier Trusts
Part 6 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 5 exploited kid to point a local file lookup somewhere unintended. Th
Jul 18, 20264 min read
JWT Attack Lab — Part 5: Path Traversal Through the kid Header
Part 5 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 4 cracked a weak HMAC secret offline with hashcat. This part doesn't
Jul 18, 20264 min read
JWT Attack Lab — Part 4: Cracking a Weak HMAC Secret With Hashcat
Part 4 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 3 fixed the alg: none bypass by explicitly restricting which algorith
Jul 18, 20264 min read1