Exploitation: Preparing to Hack

In previous videos, we saw that OWASP Juice Shop used JSON Web Tokens to store several claims. JSON Web Tokens are used to securely transfer data between two parties. These tokens are stored on the client side as cookies and are also stored in the browser’s local storage.

There is a well-known vulnerability in some JSON Web Token libraries, allowing attackers to bypass the system’s verification step. We are going to check whether Juice Shop is vulnerable.

Over to you: Log in to OWASP Juice Shop, then follow the video demonstration in the next step.