From dcb804c60abbedbc1262a881ec454f13088965b2 Mon Sep 17 00:00:00 2001 From: buherator Date: Sun, 2 Oct 2022 09:49:04 +0200 Subject: [PATCH] Update README --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index e7bebe0..d261f7f 100644 --- a/README.md +++ b/README.md @@ -8,3 +8,5 @@ The repository contains: * Proof-of-Concept code to exploit the [CVE-2017-11424](https://snyk.io/vuln/SNYK-PYTHON-PYJWT-40693) key confusion vulnerability in pyJWT, without knowing the public key of the target Additional reading: [Abusing JWT Public Keys Without the Public Key](https://blog.silentsignal.eu/2021/02/08/abusing-jwt-public-keys-without-the-public-key/) + +__You probably want to use the Docker image provided in the _standalone_ directory.__