πNew WriteupβοΈ
βββββββββββββββ
πDate: Tue, 14 Mar 2023 04:07:26 GMT
βββββββββββββββ
βοΈTitle: What is JWT and Why does it matter ? Authorization Tokens Part 2
βββββββββββββββ
πLink: https://medium.com/p/4c3a7ae43d8e
βββββββββββββββ
Tags: #cybersecurity #jwt #bug_bounty #token #webauthn
βββββββββββββββ
πDate: Tue, 14 Mar 2023 04:07:26 GMT
βββββββββββββββ
βοΈTitle: What is JWT and Why does it matter ? Authorization Tokens Part 2
βββββββββββββββ
πLink: https://medium.com/p/4c3a7ae43d8e
βββββββββββββββ
Tags: #cybersecurity #jwt #bug_bounty #token #webauthn
Medium
What is JWT and Why does it matter ? Authorization Tokens Part 2
The story starts with a problem. The problem that occurs with Session Tokens. We discussed in Part1. Give that a 4 minute read before thisβ¦
β€· Title: Passwordless, Finally?
ββββββββββββββββββββββββ
πͺ Author: Modexa
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 22 Sep 2025 19:32:03 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #passkey #webauthn #authentication #biometrics
ββββββββββββββββββββββββ
πͺ Author: Modexa
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 22 Sep 2025 19:32:03 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #passkey #webauthn #authentication #biometrics
Medium
Passwordless, Finally?
Will biometrics and passkeys really kill the password in 2025?
β€· Title: Multi-Factor Authentication (MFA): The Single Most Effective Defense Against Account Takeover
ββββββββββββββββββββββββ
πͺ Author: Kunal Sinha
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Oct 2025 04:23:36 GMT
ββββββββββββββββββββββββ
β Tags: #security #passkey #information_security #webauthn #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Kunal Sinha
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Oct 2025 04:23:36 GMT
ββββββββββββββββββββββββ
β Tags: #security #passkey #information_security #webauthn #cybersecurity
Medium
Multi-Factor Authentication (MFA): The Single Most Effective Defense Against Account Takeover
Multi-Factor Authentication (MFA) is the single most effective action you can take to prevent digital account takeover. If this is a newβ¦
β€· Title: ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 05 Dec 2025 03:59:35 +0000
ββββββββββββββββββββββββ
β Tags: #Open Source Tool #Browser Implant #ChromeAlone #Credential Theft #EDR Bypass #post_exploitation #Red Team Tool #SOCKS Proxy #WebAuthn Phishing
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 05 Dec 2025 03:59:35 +0000
ββββββββββββββββββββββββ
β Tags: #Open Source Tool #Browser Implant #ChromeAlone #Credential Theft #EDR Bypass #post_exploitation #Red Team Tool #SOCKS Proxy #WebAuthn Phishing
Penetration Testing Tools
ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
ChromeAlone is a stealthy browser implant providing EDR-resistant persistence, SOCKS proxying, session/credential theft, and WebAuthn phishing for security tokens.
β€· Title: VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 29 May 2026 09:41:23 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #cross_site authentication data theft #Google Workspace proxy environment hijacking #iCloud Keychain vs Google security architecture #multi_platform synchronized repository dump #PhishU Adversary_in_the_Middle framework #session cookie token theft mitigations #synchronization PIN credential exfiltration #unauthorized trusted device registry #VaultJacking Google password phishing #WebAuthn hardware perimeter bypass
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 29 May 2026 09:41:23 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #cross_site authentication data theft #Google Workspace proxy environment hijacking #iCloud Keychain vs Google security architecture #multi_platform synchronized repository dump #PhishU Adversary_in_the_Middle framework #session cookie token theft mitigations #synchronization PIN credential exfiltration #unauthorized trusted device registry #VaultJacking Google password phishing #WebAuthn hardware perimeter bypass
Information Security News
VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
The Genesis of the VaultJacking Attack Vector A solitary numeric PIN can transform Googleβs password repository into an unsecured gateway. Consequently, the emerging VaultJacking phishing methodolβ¦
β€· Title: iCloud Private Relay IP Leak: Three WebKit Flaws Expose Real User IP Addresses
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 07 Aug 2026 14:15:31 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Apple Privacy #DNS Prefetch #iCloud Private Relay #IP Address Leak #Safari Vulnerability #WebAuthn Leak #WebKit IP Leak #WebTransport
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 07 Aug 2026 14:15:31 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Apple Privacy #DNS Prefetch #iCloud Private Relay #IP Address Leak #Safari Vulnerability #WebAuthn Leak #WebKit IP Leak #WebTransport
Information Security News
iCloud Private Relay IP Leak: Three WebKit Flaws Expose Real User IP Addresses
A feature designed to shield users from surveillance on the internet has been found capable of disclosing their genuine location β a fundamental contradiction embedded within Appleβs iβ¦