正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Real-world scenario [1]: (JWT Led to 2FA Bypass) #CTF #bugbounty #bugbountytips #bugbountytip

𝗗𝘀𝗼𝗸𝗲𝗩🧑‍💻

5,219 subscribers

13,224 次观看 • 4 天前 •via X (Twitter)

#CTF #bugbounty #bugbountytips #bugbountytip

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

🌟Find Broken Authentication in 30 seconds or less using Autorize🌟 ©️ Andrei Agape 📥 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #GitHub #oswe #offsec

Brut 🇮🇳

16,445 次观看 • 2 年前

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Sardar

21,722 次观看 • 1 年前

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB Details: #cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #100DaysOfCyberSecurity #CyberSecurityAwareness

7h3h4ckv157

101,971 次观看 • 3 年前

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Bypass the uploader and upload any file the attacker wants just by using the null byte %0d%0a Bypass technique used : shell.php%0d%0a.jpg Tip: Always test all null bytes #bugbountytips #bugbounty #CyberSecurity #Developers #RedTeaming #bug #Security

Sardar

28,356 次观看 • 9 个月前

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo is the only network that supports 2FA at the protocol level. Watch how Rialo makes 2FA native, programmable, and impossible to bypass. 👇

Rialo

46,417 次观看 • 6 个月前

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Discovered a new xss payload that bypasses cloudflare web application firewall!! Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS #cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

Faiyaz Ahmad

37,708 次观看 • 2 年前

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

Broke into a vulnerable e-commerce app from scratch — robots.txt recon → Gobuster enumeration → leaked config file → JWT forging → admin takeover via Burp Suite. This is what information disclosure + weak JWT secrets look like in the real world.

EBENEZER ADU-BITHERMAN

57,720 次观看 • 2 个月前

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Hazem

16,502 次观看 • 9 个月前

The Assassination That Led To WORLD WAR 1

The Assassination That Led To WORLD WAR 1

Samuel omuru

1,801,995 次观看 • 1 个月前

Another real world scenario where FSD could completely change someone’s life.

Another real world scenario where FSD could completely change someone’s life.

Tesla King

32,936 次观看 • 8 个月前

Real war is about MATH… in a World War III scenario.

Real war is about MATH… in a World War III scenario.

💖TRUMPS BLONDE💖

63,360 次观看 • 4 个月前

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

This is pretty damning evidence that a world led by the United States is the very worst possible scenario

Tiberius

250,590 次观看 • 1 年前

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

2014 World Cup Winners’ Challenge for Gary Street! 🏆 In 2014, Gary Street led England women to Rugby World Cup victory. In 2024, Gary suffered a massive stroke following a heart bypass operation, and severe complications.

The Good, The Scaz And The Rugby

11,313 次观看 • 2 年前

DONALD TRUMPS OWN SON CONFIRMS DEFI ON THE #XRP LEDGER TO DOMINATE THE FINANCIAL SYSTEM AND OUTPREFORM SWIFT! TOP DEFI PROJECT ON THE XRPL, CTF TOKEN, JUST ANNOUNCED ONBOARDING ONE OF THE LARGEST REAL ESTATE DEVELOPERS IN THE WORLD COME JUNE 23RD! THIS IS MASSIVE AND IS THE BEGINNING OF THE SHIFT! THINK ABOUT CTF TOKEN IS CURRENTLY SITTING AT JUST $0.43! JUST $20 BILLION MARKET CAP WOULD SEND CTF TOKEN FROM THE $0.43 TO $748.50 PER TOKEN! ITS CRAZY BUT REAL! ITS GOING TO GET EVEN CRAZIER!SOME PEOPLE BOUGHT CTF TOKEN AT $0.01! THOSE PEOPLE HAVE ALREADY MADE 43x WHATS COMING IS GOING TO MAKE THAT PENNIES ON THE DOLLAR! AT LEAST LOOK INTO IT! CTF TOKEN TRADE LINK ON MEXC: ALSO CTF TOKEN ON BANXCHANGE:

DONALD TRUMPS OWN SON CONFIRMS DEFI ON THE #XRP LEDGER TO DOMINATE THE FINANCIAL SYSTEM AND OUTPREFORM SWIFT! TOP DEFI PROJECT ON THE XRPL, CTF TOKEN, JUST ANNOUNCED ONBOARDING ONE OF THE LARGEST REAL ESTATE DEVELOPERS IN THE WORLD COME JUNE 23RD! THIS IS MASSIVE AND IS THE BEGINNING OF THE SHIFT! THINK ABOUT CTF TOKEN IS CURRENTLY SITTING AT JUST $0.43! JUST $20 BILLION MARKET CAP WOULD SEND CTF TOKEN FROM THE $0.43 TO $748.50 PER TOKEN! ITS CRAZY BUT REAL! ITS GOING TO GET EVEN CRAZIER!SOME PEOPLE BOUGHT CTF TOKEN AT $0.01! THOSE PEOPLE HAVE ALREADY MADE 43x WHATS COMING IS GOING TO MAKE THAT PENNIES ON THE DOLLAR! AT LEAST LOOK INTO IT! CTF TOKEN TRADE LINK ON MEXC: ALSO CTF TOKEN ON BANXCHANGE:

𝓐𝓶𝓮𝓵𝓲𝓮

38,419 次观看 • 1 年前

This is what simulators are for, train you for a real-world scenario 😎

This is what simulators are for, train you for a real-world scenario 😎

Thenewarea51

13,694 次观看 • 1 年前

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

JWT in 60 Seconds 👇 What is JWT ? JWT = JSON Web Token A compact, URL-safe token used for: - Authentication - Authorization - Secure API communication - Identity sharing between services It is digitally signed, so it can be verified and trusted. 🟢 Why JWT exists Typical flow without JWT: User → Application → Database (Session Store) - Server stores sessions - Requires memory/storage - Hard to scale in microservices - More infrastructure complexity - Needs sticky sessions behind Load Balancer - This doesn’t scale well in distributed systems. 🟢 JWT comes into the picture - JWT is stateless authentication. New flow: User → Application → JWT → Client → API - No session stored on server - Token carries user identity & claims - Server only verifies signature - Perfect for scalable systems. 🟢 Complete JWT request flow 1️⃣ User logs in with credentials 2️⃣ Server validates user 3️⃣ Server generates JWT (Header + Payload + Signature) 4️⃣ Client stores JWT (usually in browser/app) 5️⃣ Client sends JWT in Authorization header 6️⃣ Server verifies signature 7️⃣ If valid → Access granted No database lookup for session needed. 🟢 Where JWT is used in real systems? - REST APIs - Microservices authentication - OAuth2 / SSO - API Gateways - Kubernetes dashboards - CI/CD tools - Mobile & SPA applications - Almost every modern cloud-native app uses JWT. 🟢 JWT in DevOps & System Design : As a DevOps engineer, JWT knowledge is used in: - Designing stateless applications - Scaling apps behind Load Balancers - Implementing API security - Working with IAM & OAuth providers - Securing microservices communication - Reducing session storage dependency Stateless auth = Better scalability + Simpler infrastructure Thanks for reading. Happy Learning !

Nandkishor

27,790 次观看 • 5 个月前

🚨 BREAKING: Top Crypto Analyst Says Only 1% of the World Will Be Able to Afford #XRP Soon‼️ That’s right — XRP is expected to soar past $35,000 per coin! 🔥 LEADING DEFI TOKEN ON THE XRPL, CTF TOKEN, SECURES PARTNERSHIPS WITH AMAZON AND WALMART!! GET READY FOR A MASSIVE SHIFT!! #CTF TOKEN COULD SURGE FROM $0.99 TO $748.50 PER TOKEN, WITH A MARKET CAP OF JUST $20 BILLION! Trade CTF Token on Banxchange: Trade CTF Token on MEXC: Official Website: THIS IS POISED TO ERUPT!! 🚀

🚨 BREAKING: Top Crypto Analyst Says Only 1% of the World Will Be Able to Afford #XRP Soon‼️ That’s right — XRP is expected to soar past $35,000 per coin! 🔥 LEADING DEFI TOKEN ON THE XRPL, CTF TOKEN, SECURES PARTNERSHIPS WITH AMAZON AND WALMART!! GET READY FOR A MASSIVE SHIFT!! #CTF TOKEN COULD SURGE FROM $0.99 TO $748.50 PER TOKEN, WITH A MARKET CAP OF JUST $20 BILLION! Trade CTF Token on Banxchange: Trade CTF Token on MEXC: Official Website: THIS IS POISED TO ERUPT!! 🚀

CryptoGeek

85,060 次观看 • 1 年前

Humanize Your Text with HIX Bypass 1. Search for "HIX Bypass" on Google or head over to 2. Copy the content to HIX Bypass and let the tool humanize/rewrite it.

Humanize Your Text with HIX Bypass 1. Search for "HIX Bypass" on Google or head over to 2. Copy the content to HIX Bypass and let the tool humanize/rewrite it.

Poonam Soni

230,294 次观看 • 2 年前