TheNotebook

TheNotebook

Sunday, 4 July, 2021 9:02 PM

https://blog.pentesteracademy.com/hacking­jwt­tokens­kid­claim­misuse­key­leak­e7fce9a10a9c

Create your own rsa private key by abusing the to create my our own token

Note : remove "==" if the token does not work

OR

Paste header , payload one at a time

Separate header , payload and rsa key by a "."

Paste the payload here

Upload php reverse shell

Remember to set up listener

Run the file