Blue Badge

1509 Completed

24 Videos

11 Exercises

This badge is an extension of the yellow badge and covers complex attacks

Exercises

This exercise covers the exploitation of the Struts S2-052 vulnerability
1 video
Completed by 2512 students
Takes < 1 Hr. on average
Java/Struts

This exercise covers the exploitation of a website using JWT for session without verifying the signature
2 videos
Completed by 3318 students
Takes < 1 Hr. on average
jwt
cwe-310

Git Information Leak

This exercise details how to retrieve information from an exposed .git directory on a web server
1 video
Completed by 3450 students
Takes < 1 Hr. on average

This exercise covers the exploitation of a trivial secret used to sign JWT tokens.
4 videos
Completed by 2997 students
Takes < 1 Hr. on average
jwt
cwe-310

Git Information Leak II

This exercise details how to retrieve information from an exposed .git directory on a web server, provided directory listing is disabled
1 video
Completed by 2554 students
Takes < 1 Hr. on average

JWT kid Injection

This exercise covers the exploitation of an issue in the usage of JWT token
3 videos
Completed by 2870 students
Takes 1-2 Hrs. on average
jwt
cwe-310

This exercise covers the exploitation of a vulnerability similar to the recent CVE-2017-17405 impacting Ruby Net::FTP
3 videos
Completed by 2652 students
Takes < 1 Hr. on average
jwt
cwe-310

This exercise covers the exploitation of an injection in the kid element of a JWT. This injection can be used to bypass the signature mechanism
3 videos
Completed by 2504 students
Takes < 1 Hr. on average
jwt
cwe-310

This exercise covers the exploitation of an application using CBC-MAC when an attacker has control over the IV
1 video
Completed by 1704 students
Takes 1-2 Hrs. on average
Crypto

This exercise covers the exploitation of signature of non-fixed size messages with CBC-MAC
2 videos
Completed by 1664 students
Takes 1-2 Hrs. on average
Crypto

This exercise details the exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT
3 videos
Completed by 1830 students
Takes 2-4 Hrs. on average
jwt
CWE-347