Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

JWT Bypass- 175

Insomnia Posted 5 Years Ago
  • The Auth0 API ensures that the none JWT signature is not used (in order to ensure that an actual signature is used).
  • However, a case sensitivity issue was discovered! Using something like nonE would bypass the check.
  • This just makes me wonder: how many validations are out there using insure casing checks? Something to consider!