Скачать или смотреть OWASP NZ Day 2019: JWAT: Attacking JSON Web Tokens

Louis Nyffenegger - Pentester Lab

Abstract

Nowadays, JSON Web Tokens are everywhere. They are used as session tokens or just to pass data between applications or µservices. By design, JWT contains a high number of security and cryptography pitfalls. In this talk, we are going to learn how to exploit (with demos) some of those issues.

Speaker Biography

Louis is a security engineer based in Melbourne, Australia. He performs pentest, architecture and code review. Louis is the founder of PentesterLab, a learning platform for Web penetration testing. Recently, Louis talked at OWASP AppSecDay Melbourne, and ran two workshops at DEF CON 26, in 2018.

This presentation is from OWASP New Zealand Day 2019, which was held on 22 Feb 2019 in Auckland, New Zealand.