3 Videos for CVE-2018-0114

PRO
Tier
Hard
Hard
1905 completed
Return to Exercise
image of exercise CVE-2018-0114 - Introduction

This video requires PentesterLab PRO

GO PRO
CVE-2018-0114 - Introduction

In this video, we delve into the CVE-2018-0114 vulnerability within the context of JWT tokens. The focus is on understanding how the JWT structure works and how the Cisco Node Jose library improperly trusted embedded keys for signature verification, leading to potential security risks.

video duration icon04:18 number of views icon2394

 

image of exercise CVE-2018-0114 -  Exploitation

This video requires PentesterLab PRO

GO PRO
Spoiler
CVE-2018-0114 - Exploitation

In this video, we dive into the exploitation of CVE-2018-0114 as part of the Blue Badge series. We'll walk through the process of registering, retrieving and decoding a JWT token, and ultimately crafting a payload to achieve administrative access.

video duration icon11:44 number of views icon2375

 

image of exercise CVE-2018-0114: Exploitation in Python 3

This video requires PentesterLab PRO

GO PRO
Spoiler
CVE-2018-0114: Exploitation in Python 3

In this video, we delve into the exploitation of CVE-2018-0114 using Python 3. This vulnerability allows attackers to embed a key inside the header of a JWT, which the Cisco "jose" library will then trust. The exercise demonstrates how to craft an exploit to take advantage of this flaw.

video duration icon12:49 number of views icon1988