Chaining SSRF to AWS IMDSv1 Credential Theft
A weaponized bug chain that turns a forgotten URL parameter into instant AWS account access.
Marcus Yuen-Castillo
Breach Authority — Page 4
JWT Authentication Bypass and Algorithm Confusion Attacks
How RS256 to HS256 swaps let attackers forge tokens with public keys.
Deja Okonkwo