Skip to main content

Andrew Gahan

Showing posts by Andrew Gahan.

JWT Abuse in Modern Web Apps: How a Misconfigured Token Leads to Full Access 

Introduction JSON Web Tokens (JWTs) have become a cornerstone of modern web application authentication. Their stateless nature and flexibility make th…

Read more

Leveraging ‘Rubeus’ for Active Directory Penetration Testing (Part One) 

The rapidly evolving, complex cybersecurity landscape places Active Directory (AD) at the forefront of many cyber threats. As a crucial component of n…

Read more

Tags

See all