gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-01-07 19:00:36 -08:00
Code Issues Packages Projects Releases Wiki Activity

JWT None alternative + MS15-051

Browse Source
This commit is contained in:
Swissky
2019-08-22 23:03:48 +02:00
parent e0220d1f17
commit 6c161f26b2
2 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
JSON Web Token/README.md
View File

@@ -72,6 +72,12 @@ JWT Encoder – Decoder: `http://jsonwebtoken.io`
JWT supports a None algorithm for signature. This was probably introduced to debug applications. However, this can have a severe impact on the security of the application.
None algorithm variants:
* none
* None
* NONE
* nOnE
To exploit this vulnerability, you just need to decode the JWT and change the algorithm used for the signature. Then you can submit your new JWT.
However, this won't work unless you **remove** the signature