Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Real-world scenario [1]: (JWT Led to 2FA Bypass) #CTF #bugbounty #bugbountytips #bugbountytip

DsokeyyV's profile picture

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

5,428 subscribers

14,128 görüntüleme • 2 ay önce •via X (Twitter)

#CTF#bugbounty#bugbountytips#bugbountytip
LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

Real-world scenario [5]: (OTP bypass via logic flaw) #CTF #bugbounty #bugbountytips #bugbountytip
3:07

Real-world scenario [5]: (OTP bypass via logic flaw) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

24,736 görüntüleme • 1 ay önce

Real-world scenario [10]: (RCE via Cart) #CTF #bugbounty #bugbountytips #bugbountytip
3:06

Real-world scenario [10]: (RCE via Cart) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

20,623 görüntüleme • 26 gün önce

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER
2:16

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Sardar

21,722 görüntüleme • 1 yıl önce

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec
0:24

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

Brut 🇮🇳

16,445 görüntüleme • 2 yıl önce

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness
1:06

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

7h3h4ckv157

101,971 görüntüleme • 3 yıl önce

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security
0:30

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Sardar

28,467 görüntüleme • 11 ay önce

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇
1:28

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo

46,870 görüntüleme • 8 ay önce

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting
0:23

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Faiyaz Ahmad

37,725 görüntüleme • 2 yıl önce

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.
5:27

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

EBENEZER ADU-BITHERMAN

58,142 görüntüleme • 4 ay önce

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip
0:51

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Hazem

16,613 görüntüleme • 11 ay önce

The Assassination That Led To WORLD WAR 1
1:09

The Assassination That Led To WORLD WAR 1

Samuel omuru

1,803,312 görüntüleme • 3 ay önce

Real war is about MATH… in a World War III scenario.
3:50

Real war is about MATH… in a World War III scenario.

💖TRUMPS BLONDE💖

63,571 görüntüleme • 6 ay önce

This is pretty damning evidence that a world led by the United States is the very worst possible scenario
0:50

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

Tiberius

250,590 görüntüleme • 1 yıl önce

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.
0:52

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

The Good, The Scaz And The Rugby

11,316 görüntüleme • 2 yıl önce

This is what simulators are for, train you for a real-world scenario 😎
2:08

This is what simulators are for, train you for a real-world scenario 😎

Thenewarea51

13,694 görüntüleme • 1 yıl önce

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !
1:00

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,917 görüntüleme • 7 ay önce