By exploiting JWT algorithm confusion, I bypassed authentication to gain admin access and delete a user in this BurpSuite lab.
☆13May 23, 2025Updated last year
Alternatives and similar repositories for JWT-Authentication-Bypass-via-Algorithm-Confusion
Users that are interested in JWT-Authentication-Bypass-via-Algorithm-Confusion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automates discovery of leaked backup files via robots.txt, extracts hardcoded credentials from source code, and reveals sensitive info in…☆13Jun 17, 2025Updated last year
- This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0…☆15Jul 10, 2025Updated last year
- Bypassing WAF filters using XML encoded SQL injection payloads with BurpSuite and Hackvertor.☆15Jun 21, 2025Updated last year
- Learn how to exploit SQL injection vulnerabilities using SQLMAP, an automated penetration testing tool for database security assessment.☆17Mar 23, 2025Updated last year
- Config files for my GitHub profile.☆15Mar 20, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Everything from basic payloads to advanced exploitation techniques about Cross Site Scripting (XSS) Attacks, along with tools and mitigat…☆16Mar 27, 2025Updated last year
- Exploiting LLM overreach to delete users via prompt engineering — a deep dive into PortSwigger’s excessive agency lab.☆15Aug 1, 2025Updated last year
- A command-line Application Tracking System (ATS) that automates resume screening by analyzing job descriptions and ranking candidate resu…☆15May 29, 2025Updated last year
- Lakera Gandalf AI challenge's step by step walkthrough, showcasing real-world prompt injection techniques and LLM security insights.☆16Apr 12, 2025Updated last year
- Mastering Shodan Dorks from beginner to beast mode for OSINT, Recon and Bug Bounty Domination.☆16Apr 20, 2025Updated last year
- A deep dive into CVE-2025-49706 — the SharePoint spoofing flaw now exploited in the wild for stealthy web shell deployment and privilege …☆18Jul 20, 2025Updated last year
- Cam-Brute Shodan API Key Leak Fix☆15Feb 25, 2025Updated last year
- Inspira ExchangeRate API Key Leak Fix☆15Feb 25, 2025Updated last year
- A simple multi-client chat application using Python's socket and threading modules. This application allows multiple users to communicate…☆15Feb 27, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Network, recon and offensive-security tool for Linux.☆15Feb 25, 2025Updated last year
- Light Capture The Flag Walkthrough☆15Jul 13, 2026Updated 3 months ago
- ai app key leak fix☆15Mar 7, 2025Updated last year
- AutoGPT-Next-Web-1 API Keys Fix☆15Feb 25, 2025Updated last year
- Finance Repo API Key Leak Fix☆15Feb 25, 2025Updated last year
- A concise Bash scripting manual covering syntax, variables, conditionals, loops and other necessary functions.☆15Feb 28, 2025Updated last year
- A detailed walkthrough of Billing room exploiting CVE-2023-30258 and escalating via fail2ban misconfig☆14Jul 13, 2026Updated 3 months ago
- AI-driven ethical hacking toolkit leveraging advanced payload generation, penetration testing automation, and AI-powered security assessm…☆16Mar 11, 2025Updated last year
- This repository contains various scripts for the Digispark ATTiny85 USB Development Board. These scripts allow you to perform fun and use…☆16Feb 27, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Python tool that leverages the Shodan API and the CIRCL CVE API to scan a target IP for running products and flag critical vulnerabilit…☆16Feb 27, 2025Updated last year
- Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!☆16Feb 21, 2025Updated last year
- Extension Fixation☆16Nov 3, 2024Updated last year
- HackScraper is a Python-based tool that scrapes, ranks, and filters top Hacker News stories based on user-defined vote thresholds.☆16Feb 23, 2025Updated last year
- Comprehensive guide to PowerShell scripting basics, covering automation, administration, and core scripting concepts.☆16Mar 1, 2025Updated last year
- Hydra Password Cracking Cheetsheet☆17Oct 7, 2020Updated 6 years ago
- Identifying and Mitigating malware threats efficiently via hash based analysis and leveraging cryptographic hash functions and platforms …☆16Mar 15, 2025Updated last year
- PixelPhantomX is an image obfuscation tool designed to disrupt AI model training by injecting adversarial noise, distortions, and metadat…☆20Apr 10, 2025Updated last year
- An in-depth guide to understanding and writing efficient assembly code for cybersecurity, exploit development, and low-level programming.☆18Mar 16, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Convert Image to Sketch with easily Python3☆17Mar 18, 2023Updated 3 years ago
- Lie Detector is a Prank software which pretends as if the software has an AI which knows the answer to any secret while the actual answer…☆18Feb 25, 2023Updated 3 years ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆17Jul 9, 2024Updated 2 years ago
- DAV CTF Walkthrough☆17Jul 13, 2026Updated 3 months ago
- Morse Code Encryption and Decryption in Python3☆17Jan 2, 2023Updated 3 years ago
- Encryption Algorithm based on Bit Manipulation in Python3☆17Mar 18, 2023Updated 3 years ago
- Deploy and orchestrate AWS RDS instances with ease, ensuring optimal performance and security along with BackUp options via Terraform.☆17Feb 23, 2025Updated last year