Blue Badge

This badge is an extension of the yellow badge and covers complex attacks

11 exercises 1589 completed 24 videos

Exercises

This exercise covers the exploitation of the Struts S2-052 vulnerability
1 video
Completed by 2626 students
Takes < 1 Hr. on average
Java/Struts

This exercise covers the exploitation of a website using JWT for session without verifying the signature
2 videos
Completed by 3602 students
Takes < 1 Hr. on average
JWT
cwe-310

Git Information Leak

This exercise details how to retrieve information from an exposed .git directory on a web server
1 video
Completed by 3611 students
Takes < 1 Hr. on average

This exercise covers the exploitation of a trivial secret used to sign JWT tokens.
4 videos
Completed by 3212 students
Takes < 1 Hr. on average
JWT
cwe-310

Git Information Leak II

This exercise details how to retrieve information from an exposed .git directory on a web server, provided directory listing is disabled
1 video
Completed by 2675 students
Takes < 1 Hr. on average

JWT kid Injection

This exercise covers the exploitation of an issue in the usage of JWT token
3 videos
Completed by 3025 students
Takes < 1 Hr. on average
JWT
cwe-310

This exercise covers the exploitation of a vulnerability similar to the recent CVE-2017-17405 impacting Ruby Net::FTP
3 videos
Completed by 2794 students
Takes < 1 Hr. on average
JWT
cwe-310

This exercise covers the exploitation of an injection in the kid element of a JWT. This injection can be used to bypass the signature mechanism
3 videos
Completed by 2647 students
Takes < 1 Hr. on average
JWT
cwe-310

This exercise covers the exploitation of an application using CBC-MAC when an attacker has control over the IV
1 video
Completed by 1795 students
Takes < 1 Hr. on average
Crypto

This exercise covers the exploitation of signature of non-fixed size messages with CBC-MAC
2 videos
Completed by 1766 students
Takes < 1 Hr. on average
Crypto

This exercise details the exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT
3 videos
Completed by 1944 students
Takes < 1 Hr. on average
JWT
CWE-347