Projects

Below are few of the articles and script I have written to contribute back to the security community.

JWT-Exploitation

Scripts for generating JWT Token as per the exploitation scenario.

Github Link: https://github.com/ni8walk3r/JWT-Exploitation

Exploiting Misconfigured Cross-Origin Resource Sharing

CORS was introduced along with HTML 5. It is a great feature which allows user to overcome the restrictions placed by Same Origin Policy and make cross-origin HTTP request.

This article explains the basics and common misconfigurations of CORS.

Host Header Injection

Host header is used by a web server to decide which website should process the received HTTP request.

This article explains the basics of Host Header and common security issues which might arise in case server blindly accepts the value present in the Host Header.