Tagged in

Portswigger Lab

System Weakness

System Weakness is a publication that specialises in publishing upcoming writers in cybersecurity and ethical hacking space. Our security experts write to make the cyber universe more secure, one vulnerability at a time.

More information

Followers

6.8K

Elsewhere

More, on Medium

Portswigger Lab

Enes Cayvarlı in System Weakness

Apr 12, 2023

Web Fundamentals | JWT Attacks

Hi there, I’m glad to see you here. In this article, we’ll examine together the “JWT Attacks” room in…

Md Tajdar Alam Ansari in System Weakness

Mar 31, 2023

Reflected XSS into HTML context with nothing encoded

1 response

Frank Leitner in System Weakness

Aug 28, 2022

Write-up: JWT authentication bypass via unverified signature @ PortSwigger Academy

Frank Leitner in System Weakness

Aug 27, 2022

Web Fundamentals | JWT Attacks

Reflected XSS into HTML context with nothing encoded

Write-up: JWT authentication bypass via unverified signature @ PortSwigger Academy

Write-up: Basic password reset poisoning @ PortSwigger Academy

Write-up: Weak isolation on dual-use endpoint @ PortSwigger Academy

Write-up: Inconsistent handling of exceptional input @ PortSwigger Academy

Write-up: Low-level logic flaw @ PortSwigger Academy

Write-up: High-level logic vulnerability @ PortSwigger Academy

Write-up: Arbitrary object injection in PHP @ PortSwigger Academy

Write-up: Broken brute-force protection, IP block @ PortSwigger Academy