commit

Author: sai1004

03.WebAnalysis/01.web-basics/03.Authentication.md

@@ -0,0 +1,56 @@
+what’s JWT?
+
+JSON Web Token(JWT) is an open standard (RFC7519) for securely transmitting information between endpoints as JSON Objects. It is mainly
+used to prove that the sent data was actually created by authentic source.
+
+JWT Consists Of Three Concatenated Base64Url-Encoded strings, separated by dots (.)
+
+They Are:
+
+1. Header
+2. Payload
+3. Signature
+
+A JWT Typically looks like:
+
+    xxxxx.yyyyy.zzzzz
+
+1. Header:
+
+The First Part Typically Consists Of Two Parts; the type of the token, which is JWT, and the signing algorithm being used such as HMAC SHA256 or RSA.
+If you don’t define the algorithm, it uses HS256 by default.
+
+    For example:
+
+        {
+
+            “alg”: “HS256”,
+            “typ”: “JWT”
+        }
+
+2. Payload:
+
+The second part consists of a set of claims that are basically verifiable security statements, such as the identity of the user and the permissions they are allowed.
+There are three types of claims: registered, public, and private claims. Note that the claim names are short as JWT is meant to be compact for fast requests.
+And wait! Be careful not to put sensitive data such as passwords in your payload as this can easily be decoded.
+
+    An example payload could be:
+
+        {
+            “sub”: “123456789”,
+            “name”: “Will Smith”,
+            “admin”: true
+        }
+
+3. Signature:
+
+The last part is the signature which is the sum of the encoded header, the encoded payload, a secret, and lastly, the algorithm which is specified in the header.
+
+For example, if you want to use the HS256 algorithm, the signature would be created in the following way:
+
+        HS256 (
+                base64UrlEncode(header) + “.” +
+                base64UrlEncode(payload),
+                secret
+
+              )

14.CyberSecurity/NetworkProtocolsSecurity.md

@@ -1,8 +1,5 @@
 <h2>HTTPS: </h2>
 
-
-
-
 <h2>Kerbrose: </h2>
 
     KDC
@@ -17,34 +14,22 @@
     |               |         |
     |_______________|_________|
 
-
-
 <h2></h2>
 
-
-
 <h2></h2>
 
-
-
 <h2></h2>
 
-
 <h2></h2>
 
-
 <h2></h2>
 
-
 <h2></h2>
 
 <h2></h2>
 
-
 <h2></h2>
 
-
 <h2></h2>
 
-
 <h2></h2>

14.CyberSecurity/ssh.md

@@ -1,2 +1,3 @@
 https://hsploit.com/ssh-brute-force-protection-with-fail2ban/
+
 https://null-byte.wonderhowto.com/how-to/hack-like-pro-linux-basics-for-aspiring-hacker-part-15-creating-secure-tunnel-mysql-0150916/