JWT Authentication Bypass via Weak Signing Key – PortSwigger Write-Up
Learn to exploit JWT vulnerabilities with weak signing keys in this PortSwigger lab write-up on JWT authentication.
3 contributions in the year 2025
12 contributions in the year 2024
7 contributions in the year 2023
49 contributions in the year 2022
18 contributions in the year 2021
Hey there 👋. I’m Juan Antonio González Mena, although many people know me as Sikumy. I’m 24 years old and have been working in the cybersecurity world for over four years. I’m also the creator of this blog you’re reading.
Deep Hacking started as simple personal notes. Over time it grew, evolved, and through its ups and downs, has become what it is today: a space created by and for the community.
I don’t know how far this project will go or what paths it will take, but what I do know is that my goal is for it to become a technical reference. Time will tell. In the meantime, I’d love for you to join me on this journey.
Learn to exploit JWT vulnerabilities with weak signing keys in this PortSwigger lab write-up on JWT authentication.
Complete guide to install and manage Kali Linux on Docker. Learn to configure the environment, tunnel traffic through Burp Suite, and manage containers.
Learn how the DNS protocol works, the types of servers involved in domain resolution, and the most common DNS records used on the internet.
Walkthrough of the PortSwigger lab on JWT authentication bypass through flawed signature verification, exploring how to exploit servers that accept unsigned tokens with the 'none' algorithm.
This author has not published articles yet.
If you like the content and want to support the project, you can buy me a coffee. Your support helps keep the site active and create more quality content.
Buy me a coffeeThanks for your support 🙏