Cybersecurity, Careers, Hacking, Bug Bounty, Penetration Testing.
This lab uses a JWT-based mechanism for handling sessions. The server supports the jwk parameter in the JWT header. This is sometimes use d to embed the correct verification key directly in the token. However, it fails to check whether the provided key came from a trusted source. To solve the lab,