JWT Vulnerabilities: Common Attacks and Security Best Practices

الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعد

What if I told you that from my student bedroom, I was able to control robots located thousands of kilometers away? No, this isn’t science…

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

In this report, I will walk through a JWT-related security issue identified during testing and explain the steps taken to analyze it.

The ultimate open-source WordPress security scanner just got even better.

How I found CVE-2026–27161 (Sensitive Disclosure) | Cyber Tamarin Introduction During continued testing of the application — after identifying Stored XSS and CSRF vulnerabilities — I focused on …

Why SAST is broken, and how it could be addressed

At zero, the strike team arrives… and someone far deadlier gets there first.

Netcat is a networking utility that can create network connections and send/receive data using TCP or UDP protocols. In simple terms, it is…

In the basics edition, we covered how to use netcat’s basic reverse shell and bind shell.

How is the Android malware stopping you from clicking the uninstall button? Why does it still run after you kill the app?

Introduction

Security Information and Event Management — better known as SIEM — is one of the most critical systems in modern cybersecurity. It…

JSON Web Tokens (JWT)

Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.

Cybersecurity researchers at Veracode reveal a typosquatting attack that disguises Pulsar RAT as images to bypass Windows security and antivirus programs.

Modern applications love WebSockets.

This website has an insecure CORS configuration in that it trusts all origins.

Coupon code exploitation !!