Skip to content

Instantly share code, notes, and snippets.

@cmaggiulli

cmaggiulli/oic-jwt-gen.sh

Last active November 15, 2019 06:25
Show Gist options
  • Save cmaggiulli/0c189b1a1b5e22d510d292ef7d686f30 to your computer and use it in GitHub Desktop.
Save cmaggiulli/0c189b1a1b5e22d510d292ef7d686f30 to your computer and use it in GitHub Desktop.
Download ZIP
A "hack" to steal a JSON Web Token from an Oracle Integration Cloud home page
Raw
oic-jwt-gen.sh
#!/bin/bash
# Tested on 19.3.xx.xx.xxxx.x
set startIndex=533
set endInex=2404
set baseURI="https://production-hangme.uscom-central-1.oraclecloud.com"
curl "$baseURI/ic/home/token" -H 'Accept: test/html' -H 'Referer: https://productionic-lathamoic.uscom-central-1.oraclecloud.com/ic/home/' -H 'DNT: 1' -H 'Sec-Fetch-Mode: cors' --compressed -L -fields=script -o .jwt.htm 2>&1 | cat .jwt.htm | cut -c 533-2404
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment