JWT security test cases

 


Comments

Post a Comment

Popular posts from this blog

SAML Security Test Cases

Signature Exclusion Attack -Test whether or not the SP accepts an Assertion without a Signature  Signature Spoofing attack -Test whether SP accepts fake signature or using previously generated/invalid signature Signature Wrapping Attack (8 Different Ways)-Test whether or not the SP is susceptible to Signature Wrapping XML Injection -Test if can inject malicious code into the SAML response from IDP, allowing them to execute arbitrary code on the SP server. XML Entity Expansion (XEE)/XXE -Test whether or not the SP is vulnerable to XML External Entities Replay attacks -Test if previously generated SAML response from IDP can be accepted by SP Certificate Faking/Self signed certificate -Test whether or not the SP verifies that the Assertion came from a trusted IDP/Test if SP accepts self-signed certificate XSLT Injection -Test whether or not the SP is vulnerable to XSLT Predictable signature -Test whether IDP generating guessable signature SAML message expiration -Test whether SP acc...
Read more

Useful Tips and Tricks for Web Pentesting

Generating Custom SSRF Payloads https://tools.intigriti.io/redirector/# How to do it 1. Go to Intigriti payload generator → https://tools.intigriti.io/redirector/# 2. Enter the target domain (it can be anything) 3. Enter your own collaborator URL 4. Submit 5. Download the .txt file and use it as part of intruder This will generate an SSRF payload list that: • Contains your collaborator URL • Applies encoding on your collaborator URL to bypass filters   Injecting Payloads in Email Address Fields test+(<script>alert(0)</script>)@example.com test@example(<script>alert(0)</script>).com "<script>alert(0)</script>"@example.com "<%=7*7%>"@example.com test+(${{7*7}})@example.com "'OR1=1--'"@example.com user@test.burpcollaborator.net user@[127.0.0.1] user@email=attacker@example.com %0d%0aContent-Length:%200%0d%0a%0d%0a"@example.com "recipient@test.com\r\nRCPT TO:<victim+"@test.com For...
Read more

Drozer - A Framework for Android Application Security Assessment.

Image
1.             Introduction 1.1   This document explains how to get started with Drozer, and how to use it to perform a security assessment of an android application. 1.1.      Drozer Drozer is a python based comprehensive security audit and attack framework for Android. It is an open-source framework, used for android pen-testing. It works like a client-server model and makes use of Android’s Inter-Process Communication (IPC) mechanism to interact with the underlying operating system of the device. IPC is a mechanism by which different components of android like intents and data binders communicate with each other so that the communication is established between the apps present in the android device. Drozer helps to remotely exploit android devices with predefined and custom modules that exploit known vulnerabilities. 1.2.      Conventions used Throughout this docu...
Read more