Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

focus_furry's profile picture

EBENEZER ADU-BITHERMAN

1,240 subscribers

57,720 görüntüleme • 1 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !
1:00

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,790 görüntüleme • 4 ay önce

Revealing the #TRUTH behind the JWT abbreviation.
0:49

Revealing the #TRUTH behind the JWT abbreviation.

Tib3rius

16,221 görüntüleme • 10 ay önce

WAIT WE GOT THE JWT VERSION
0:23

WAIT WE GOT THE JWT VERSION

b

33,913 görüntüleme • 10 ay önce

How Wayback URLs Can Expose JWT Tokens Per the creator of the video: "This short explains how archived URLs (Wayback Machine) can unintentionally expose JWT tokens when developers leave sensitive data in URLs or responses."
1:03

How Wayback URLs Can Expose JWT Tokens Per the creator of the video: "This short explains how archived URLs (Wayback Machine) can unintentionally expose JWT tokens when developers leave sensitive data in URLs or responses."

Dark Web Informer

30,320 görüntüleme • 5 ay önce

Introducing JWT Signing keys to securely and scalably handle JWT verifications on your app! We are also replacing the anon and service role keys with publishable and secret keys, enabling developers to easily rotate keys and making the keys themselves shorter.
1:53

Introducing JWT Signing keys to securely and scalably handle JWT verifications on your app! We are also replacing the anon and service role keys with publishable and secret keys, enabling developers to easily rotate keys and making the keys themselves shorter.

Supabase

19,394 görüntüleme • 11 ay önce

Difference between JWT vs Session Cookies👌💨
0:50

Difference between JWT vs Session Cookies👌💨

F.O.L.A

38,547 görüntüleme • 5 ay önce

New Video - Build a real-world MCP server with one TypeScript file. • Zero to live in 10 minutes (live coding from scratch) • Integrates real APIs + API keys • Connects to Anthropic Claude Code via stdio • Orchestrates multiple API calls into 1 action + more
11:14

New Video - Build a real-world MCP server with one TypeScript file. • Zero to live in 10 minutes (live coding from scratch) • Integrates real APIs + API keys • Connects to Anthropic Claude Code via stdio • Orchestrates multiple API calls into 1 action + more

nader dabit

76,870 görüntüleme • 1 yıl önce

Exclusive Report! What Is So Damn Funny Lutnick? Take a deep dive look into the controversial Trump Admin Secretary of Commerce. » ɢᴇᴛ ᴛʜᴇ ɴᴇᴡ ᴀᴘᴘ!
6:46

Exclusive Report! What Is So Damn Funny Lutnick? Take a deep dive look into the controversial Trump Admin Secretary of Commerce. » ɢᴇᴛ ᴛʜᴇ ɴᴇᴡ ᴀᴘᴘ!

Alex Jones

49,998 görüntüleme • 4 ay önce

Neymar broke down into tears after getting selected for the World Cup ❤️ Look what it means to him 🥹 (via Neymar Jr)
0:45

Neymar broke down into tears after getting selected for the World Cup ❤️ Look what it means to him 🥹 (via Neymar Jr)

ESPN FC

2,711,602 görüntüleme • 1 ay önce

There’s still good in the world. These three young men spotted and helped an elderly woman and her husband into their car. This is what REAL MEN look like.
1:03

There’s still good in the world. These three young men spotted and helped an elderly woman and her husband into their car. This is what REAL MEN look like.

Graham Allen

3,386,482 görüntüleme • 3 yıl önce

This is what a phenomenon looks like before the world agrees on what it is. Maybe disclosure was never going to be revelation, but accumulation. Wishing you a wonderful weekend, wherever you’re encountering this from.
2:33

This is what a phenomenon looks like before the world agrees on what it is. Maybe disclosure was never going to be revelation, but accumulation. Wishing you a wonderful weekend, wherever you’re encountering this from.

Dr. Dan

43,716 görüntüleme • 2 ay önce

This Is What the Most Attractive Man in the World May Look Like
0:31

This Is What the Most Attractive Man in the World May Look Like

non aesthetic things

742,880 görüntüleme • 1 yıl önce

$PLTR PALANTIR REAL WORLD DEMO OF BUILDING AN ONTOLOGY & UTILIZING IT VIA AIP If you’ve never seen what the ontology looks like in action for Palantir, this is an incredible example to take a look at:
13:02

$PLTR PALANTIR REAL WORLD DEMO OF BUILDING AN ONTOLOGY & UTILIZING IT VIA AIP If you’ve never seen what the ontology looks like in action for Palantir, this is an incredible example to take a look at:

amit

260,692 görüntüleme • 1 yıl önce

When Texas campuses don’t look like America anymore. This is what UT-Dallas has turned into. This is what mass student visas delivered. Our state. Our schools. Their takeover.
0:38

When Texas campuses don’t look like America anymore. This is what UT-Dallas has turned into. This is what mass student visas delivered. Our state. Our schools. Their takeover.

Info Battle Maiden

124,556 görüntüleme • 3 ay önce

Figma Motion: design AND animate in the same file Live from Config 2026
17:31

Figma Motion: design AND animate in the same file Live from Config 2026

Figma

109,682 görüntüleme • 10 gün önce

woaaah the view from above makes boynextdoor's performance look even cooler. this is what a REAL PERFORMANCE looks like
0:20

woaaah the view from above makes boynextdoor's performance look even cooler. this is what a REAL PERFORMANCE looks like

ֺ

99,781 görüntüleme • 7 ay önce

"Everyone is locked and loaded." The Base App team is in-person in NYC this week, and jesse.base.eth and Chintan Turakhia broke down what it's taken to get the app ready for the world.
1:18

"Everyone is locked and loaded." The Base App team is in-person in NYC this week, and jesse.base.eth and Chintan Turakhia broke down what it's taken to get the app ready for the world.

Base App

28,678 görüntüleme • 7 ay önce

Btw this is what the 100 pekoras look like in a line from yesterday’s video.
0:40

Btw this is what the 100 pekoras look like in a line from yesterday’s video.

Anime Girl Worshiper

205,416 görüntüleme • 1 yıl önce

What barbie learned from the real world: " being a woman is hard " What ken learned from the real world:
0:27

What barbie learned from the real world: " being a woman is hard " What ken learned from the real world:

VillainVS comms closed (now serving 4/12)

773,843 görüntüleme • 2 yıl önce

Charleston White believes the government distracts Americans whenever Epstein file information is leaked! 😳
1:42

Charleston White believes the government distracts Americans whenever Epstein file information is leaked! 😳

The Menace 🥷

172,547 görüntüleme • 5 ay önce