Blue Badge

1526 Completed

24 Videos

11 Exercises

This badge is an extension of the yellow badge and covers complex attacks

Exercises

This exercise covers the exploitation of the Struts S2-052 vulnerability
1 video
Completed by 2528 students
Takes < 1 Hr. on average
Java/Struts

This exercise covers the exploitation of a website using JWT for session without verifying the signature
2 videos
Completed by 3348 students
Takes < 1 Hr. on average
jwt
cwe-310

Git Information Leak

This exercise details how to retrieve information from an exposed .git directory on a web server
1 video
Completed by 3478 students
Takes < 1 Hr. on average

This exercise covers the exploitation of a trivial secret used to sign JWT tokens.
4 videos
Completed by 3024 students
Takes < 1 Hr. on average
jwt
cwe-310

Git Information Leak II

This exercise details how to retrieve information from an exposed .git directory on a web server, provided directory listing is disabled
1 video
Completed by 2578 students
Takes < 1 Hr. on average

JWT kid Injection

This exercise covers the exploitation of an issue in the usage of JWT token
3 videos
Completed by 2890 students
Takes 1-2 Hrs. on average
jwt
cwe-310

This exercise covers the exploitation of a vulnerability similar to the recent CVE-2017-17405 impacting Ruby Net::FTP
3 videos
Completed by 2674 students
Takes < 1 Hr. on average
jwt
cwe-310

This exercise covers the exploitation of an injection in the kid element of a JWT. This injection can be used to bypass the signature mechanism
3 videos
Completed by 2525 students
Takes < 1 Hr. on average
jwt
cwe-310

This exercise covers the exploitation of an application using CBC-MAC when an attacker has control over the IV
1 video
Completed by 1721 students
Takes 1-2 Hrs. on average
Crypto

This exercise covers the exploitation of signature of non-fixed size messages with CBC-MAC
2 videos
Completed by 1680 students
Takes 1-2 Hrs. on average
Crypto

This exercise details the exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT
3 videos
Completed by 1848 students
Takes 2-4 Hrs. on average
jwt
CWE-347