Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Real-world scenario [1]: (JWT Led to 2FA Bypass) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

5,428 subscribers

14,128 Aufrufe • vor 2 Monaten •via X (Twitter)

#CTF #bugbounty #bugbountytips #bugbountytip

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

Real-world scenario [5]: (OTP bypass via logic flaw) #CTF #bugbounty #bugbountytips #bugbountytip

Real-world scenario [5]: (OTP bypass via logic flaw) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

24,736 Aufrufe • vor 1 Monat

Real-world scenario [10]: (RCE via Cart) #CTF #bugbounty #bugbountytips #bugbountytip

Real-world scenario [10]: (RCE via Cart) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

20,623 Aufrufe • vor 26 Tagen

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Sardar

21,722 Aufrufe • vor 1 Jahr

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

Brut 🇮🇳

16,445 Aufrufe • vor 2 Jahren

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

7h3h4ckv157

101,971 Aufrufe • vor 3 Jahren

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Sardar

28,467 Aufrufe • vor 11 Monaten

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo

46,870 Aufrufe • vor 8 Monaten

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Faiyaz Ahmad

37,725 Aufrufe • vor 2 Jahren

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

EBENEZER ADU-BITHERMAN

58,142 Aufrufe • vor 4 Monaten

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Hazem

16,613 Aufrufe • vor 11 Monaten

The Assassination That Led To WORLD WAR 1

The Assassination That Led To WORLD WAR 1

Samuel omuru

1,803,312 Aufrufe • vor 3 Monaten

Real war is about MATH… in a World War III scenario.

Real war is about MATH… in a World War III scenario.

💖TRUMPS BLONDE💖

63,571 Aufrufe • vor 6 Monaten

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

Tiberius

250,590 Aufrufe • vor 1 Jahr

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

The Good, The Scaz And The Rugby

11,316 Aufrufe • vor 2 Jahren

This is what simulators are for, train you for a real-world scenario 😎

This is what simulators are for, train you for a real-world scenario 😎

Thenewarea51

13,694 Aufrufe • vor 1 Jahr

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,917 Aufrufe • vor 7 Monaten