picoCTF - Java Code Analysis!?! - Live Walkthrough

In this video, Tib3rius solves the medium rated "Java Code Analysis!?!" challenge from picoCTF. 0:00 - Introduction 0:20 - Starting Java Code Analysis!?! 6:26 - Initial source code review. 16:17 - Running the code locally to help identify weaknesses. 21:15 - Using the weak JWT secret key to create an admin session token. 24:15 - Getting the local flag using our admin session token. 25:09 - Replicating the attack on the live system. 26:05 - More in-depth explanation of the entire attack. 34:47 - Outro Twitter: https://twitter.com/0xTib3rius Twitch: https://www.twitch.tv/0xTib3rius/ Courses: https://courses.tib3rius.com Udemy: https://www.udemy.com/user/tib3rius/ Discord: https://discord.com/invite/4qrvKMh LinkedIn: https://www.linkedin.com/in/tib3rius/ Facebook: https://www.facebook.com/0xTib3rius