3 Videos for JWT Algorithm Confusion with RSA Public Key Recovery

In this video, we cover the challenge JWT XIII as part of the Brown badge. We discuss the structure and verification process of JWT tokens, focusing on RSA and HMAC signing methods, and demonstrate how an attacker can exploit the algorithm field to forge tokens.

In this video, we tackle the JWT XIII challenge as part of the Brown Badge series. We explore the exploitation process, including setting up the necessary tools and dependencies, and demonstrate how to exploit algorithm confusion to gain unauthorized access.

In this video, we delve into the second part of exploiting the JWT XIII challenge as part of the Brown Badge. We focus on tampering with the script to create a token that logs us in as an admin.