Abusing JWT (JSON Web Tokens) - Sven Morgenroth - PSW #673

<p>Learn how JWTs are implemented, both the correct way and the insecure way. Spoiler alert, most implement them insecurely. Sven will also show you some of the common attacks against JWTs, for use in your next penetration test, bug bounty, or conversation with your developers!</p> <p> </p> <p>This segment is sponsored by Netsparker. Visit <a href= "https://securityweekly.com/netsparker">https://securityweekly.com/netsparker</a> to learn more about them!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://wiki.securityweekly.com/psw673">https://wiki.securityweekly.com/psw673</a></p>