Double Auth Headers FTW

Interesting… I need to give this a try 🧐

@rez0__ Similar to HTTP Param Pollution but for headers and in this case auth token data. The vulns arise out of diff layers disagreeing on which duplicate to take: first vs last

So basically, if I’m a low-privileged user with an auth bearer token, and I add an admin token with the none algorithm and get admin access, is that considered a vulnerability?

Annnnd...... It's added to everyone's skills

Interesting piece! 🔥

Will try this 🫡

That's amazing !!! Thank you for the great content

@zseano Bearer token smuggling -> JWTsigned-JWTnone 😂

nice find though am surprised about how devs can do such mistakes, or is it the result of blindly using an llm

which ep is this? thanks!