Loading video...

Video Failed to Load

Go Home

Real-world scenario [1]: (JWT Led to 2FA Bypass) #CTF #bugbounty #bugbountytips #bugbountytip

DsokeyyV's profile picture

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

5,219 subscribers

13,224 views • 4 days ago •via X (Twitter)

#CTF#bugbounty#bugbountytips#bugbountytip
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec
0:24

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

Brut 🇮🇳

16,445 views • 2 years ago

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER
2:16

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Sardar

21,722 views • 1 year ago

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness
1:06

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

7h3h4ckv157

101,971 views • 3 years ago

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security
0:30

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Sardar

28,356 views • 9 months ago

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇
1:28

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo

46,417 views • 6 months ago

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting
0:23

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Faiyaz Ahmad

37,708 views • 2 years ago

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.
5:27

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

EBENEZER ADU-BITHERMAN

57,720 views • 2 months ago

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip
0:51

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Hazem

16,502 views • 9 months ago

The Assassination That Led To WORLD WAR 1
1:09

The Assassination That Led To WORLD WAR 1

Samuel omuru

1,801,995 views • 1 month ago

Another real world scenario where FSD could completely change someone’s life.
0:24

Another real world scenario where FSD could completely change someone’s life.

Tesla King

32,936 views • 8 months ago

Real war is about MATH… in a World War III scenario.
3:50

Real war is about MATH… in a World War III scenario.

💖TRUMPS BLONDE💖

63,360 views • 4 months ago

This is pretty damning evidence that a world led by the United States is the very worst possible scenario
0:50

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

Tiberius

250,590 views • 1 year ago

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.
0:52

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

The Good, The Scaz And The Rugby

11,313 views • 2 years ago

DONALD TRUMPS OWN SON CONFIRMS DEFI ON THE #XRP LEDGER TO DOMINATE THE FINANCIAL SYSTEM AND OUTPREFORM SWIFT! TOP DEFI PROJECT ON THE XRPL, CTF TOKEN, JUST ANNOUNCED ONBOARDING ONE OF THE LARGEST REAL ESTATE DEVELOPERS IN THE WORLD COME JUNE 23RD! THIS IS MASSIVE AND IS THE BEGINNING OF THE SHIFT! THINK ABOUT CTF TOKEN IS CURRENTLY SITTING AT JUST $0.43! JUST $20 BILLION MARKET CAP WOULD SEND CTF TOKEN FROM THE $0.43 TO $748.50 PER TOKEN! ITS CRAZY BUT REAL! ITS GOING TO GET EVEN CRAZIER!SOME PEOPLE BOUGHT CTF TOKEN AT $0.01! THOSE PEOPLE HAVE ALREADY MADE 43x WHATS COMING IS GOING TO MAKE THAT PENNIES ON THE DOLLAR! AT LEAST LOOK INTO IT! CTF TOKEN TRADE LINK ON MEXC: ALSO CTF TOKEN ON BANXCHANGE:
0:54

DONALD TRUMPS OWN SON CONFIRMS DEFI ON THE #XRP LEDGER TO DOMINATE THE FINANCIAL SYSTEM AND OUTPREFORM SWIFT! TOP DEFI PROJECT ON THE XRPL, CTF TOKEN, JUST ANNOUNCED ONBOARDING ONE OF THE LARGEST REAL ESTATE DEVELOPERS IN THE WORLD COME JUNE 23RD! THIS IS MASSIVE AND IS THE BEGINNING OF THE SHIFT! THINK ABOUT CTF TOKEN IS CURRENTLY SITTING AT JUST $0.43! JUST $20 BILLION MARKET CAP WOULD SEND CTF TOKEN FROM THE $0.43 TO $748.50 PER TOKEN! ITS CRAZY BUT REAL! ITS GOING TO GET EVEN CRAZIER!SOME PEOPLE BOUGHT CTF TOKEN AT $0.01! THOSE PEOPLE HAVE ALREADY MADE 43x WHATS COMING IS GOING TO MAKE THAT PENNIES ON THE DOLLAR! AT LEAST LOOK INTO IT! CTF TOKEN TRADE LINK ON MEXC: ALSO CTF TOKEN ON BANXCHANGE:

𝓐𝓶𝓮𝓵𝓲𝓮

38,419 views • 1 year ago

This is what simulators are for, train you for a real-world scenario 😎
2:08

This is what simulators are for, train you for a real-world scenario 😎

Thenewarea51

13,694 views • 1 year ago

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !
1:00

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,790 views • 5 months ago

🚨 BREAKING: Top Crypto Analyst Says Only 1% of the World Will Be Able to Afford #XRP Soon‼️ That’s right — XRP is expected to soar past $35,000 per coin! 🔥 LEADING DEFI TOKEN ON THE XRPL, CTF TOKEN, SECURES PARTNERSHIPS WITH AMAZON AND WALMART!! GET READY FOR A MASSIVE SHIFT!! #CTF TOKEN COULD SURGE FROM $0.99 TO $748.50 PER TOKEN, WITH A MARKET CAP OF JUST $20 BILLION! Trade CTF Token on Banxchange: Trade CTF Token on MEXC: Official Website: THIS IS POISED TO ERUPT!! 🚀
5:19

🚨 BREAKING: Top Crypto Analyst Says Only 1% of the World Will Be Able to Afford #XRP Soon‼️ That’s right — XRP is expected to soar past $35,000 per coin! 🔥 LEADING DEFI TOKEN ON THE XRPL, CTF TOKEN, SECURES PARTNERSHIPS WITH AMAZON AND WALMART!! GET READY FOR A MASSIVE SHIFT!! #CTF TOKEN COULD SURGE FROM $0.99 TO $748.50 PER TOKEN, WITH A MARKET CAP OF JUST $20 BILLION! Trade CTF Token on Banxchange: Trade CTF Token on MEXC: Official Website: THIS IS POISED TO ERUPT!! 🚀

CryptoGeek

85,060 views • 1 year ago

Humanize Your Text with HIX Bypass 1. Search for "HIX Bypass" on Google or head over to 2. Copy the content to HIX Bypass and let the tool humanize/rewrite it.
0:27

Humanize Your Text with HIX Bypass 1. Search for "HIX Bypass" on Google or head over to 2. Copy the content to HIX Bypass and let the tool humanize/rewrite it.

Poonam Soni

230,294 views • 2 years ago