Web Sep 14, 2025
Admin Panel Bypass via JWT Algorithm Confusion
BSides Prishtina 2025
A JWT authentication challenge where switching the algorithm from RS256 to HS256 and signing with the server's own public key grants unrestricted admin access.