Skip to content
PimpMyBurp #11 – Master Signed Token Exploits with SignSaboteur
yeswehack.com | blog | #burp-suite | #authentication-bypass | #web-security | #brute-force | #extension | #signed-tokens
Summary
PimpMyBurp #11 on SignSaboteur, a Burp Suite extension for assessing and exploiting signed web tokens (Django, Flask, Express): inline editing, secret-key brute forcing, and auth-bypass attacks.
- Published
- Collected