Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

57,720 Aufrufe • vor 2 Monaten •via X (Twitter)

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,790 Aufrufe • vor 5 Monaten

This Is Absolutely Mind Blowing ⚠️ Barack Obama’s New Movie, Leave The World Behind, When Downloaded & Put Into An Editing Program Has 4 Audio Files Instead Of The Standard 1 One Of The Audio Files Is Just A Frequency 🚨 “Low Frequency Infrasound” Other Movies Do Not Have This. The Guy Has Done Thousands Of Movies & Never Seen This “When you open this this movie right here is Jurassic Park, for instance. Okay? I'm just showing this to people who have never seen this. For the last 15 years that I have been using Sony Vegas and other editing software and have gone through downloading movies And using them in our own video production, 100% of the time, it's either an MKV or a MP For occasionally, you'll download a torrent that's in AVR, but not very often. And this is what it will always look like. One video file right here. One audio file right here always. That's been my experience. Now let me show you what happened when we downloaded and put, Sony put the, uh, movie Leave the World Behind onto Sony Vegas. Here you go. Stunning. Stunning. One video file, 4 audio files opened up. And this one, This 4th audio file seems to be the weapon. This is a low ex uh, ELF, Uh, Low Frequency Infrasound. Infrasonic wave right here. And, um, so we We are gonna let me put the camera back on again. So this is big news just just so people realize. In in 15 years of video editing, I have never downloaded now speaking specifically a movie file. Okay. A Hollywood movie from a torrent downloading it in either MKV, MP4, occasionally AVI. 100% of the time, over a thousands movies I've done this with, you have video file, audio file, period. This is the very first time I've ever seen anything like this with the 4 files. Bonnie's gonna go into now talking about the The infrasonic sound waves and what we found out about that and the fact that there's one here. We're in the point is we're going to go back after Bonnie gives you some information about what it is we're dealing with, how this is a weapon. Then we're gonna go back, uh, towards the end of the live stream here. And I'm gonna hit specific places where this weapon was used against anybody who watches it. Okay.”

Wall Street Apes

3,769,180 Aufrufe • vor 2 Jahren

how to use Google's NEW open source Design.md + AI Skills to make your startup look like a $100 million company in 1 hour: 1. Design.md is an open source file from Google that captures the soul of a design. Typography, colors, spacing, all in one markdown file. You attach it to your prompt and your agent builds beautiful things every time. 2. Think of it this way. The HTML is the finished dish. The design.md is the recipe. The skills are the ingredients. Put them together and everything you build looks consistent and professional. 3. Don't create a design system from scratch. Find a brand you love. Linear, Stripe, Vercel, whatever resonates. Study it. Use ChatGPT or Claude to help you extract the design language into your own design.md file. 4. Build skills on top of your design.md. A landing page skill. A mobile app skill. A motion design skill. A slide deck skill. Each one references the same design.md so everything looks like it came from the same designer. 5. The biggest mistake people make: they nail one screen and then everything else looks generic. Design.md solves this. One file keeps every page, every format, every medium consistent. 6. Use it across everything. Your landing page. Your app. Your pitch deck. Your promo videos. Same DNA. Same taste. Same system. That's what separates a startup that looks real from one that looks vibe-coded. 7. Build a second brain for design inspiration. When you see something beautiful in the real world or online, capture it. Save it. When you're building something new, reference it. Taste is developed, not downloaded. 8. It's obvious but the difference between a product people trust and a product people bounce from is how it looks and feels. Design.md gives you that edge. you can watch below shoutout to Meng To for coming on The Startup Ideas Podcast (SIP) 🧃 and walking through his full workflow. if you want to use AI to actually build gorgeous designs, you'll want to use see this. watch

GREG ISENBERG

508,512 Aufrufe • vor 3 Monaten