I just learned the hard way that the last char of a JWT signature can be modified and still be valid. After a lot of manual debugging, I figured out the hard way that it is in fact the normal behaviour for JWTs with certain signature types, and has to …
read moreOther articles
My First Test Post
This is a test post.
read moreReverse Engineering Legu Encryption
I recently came across an Android APK that was protected by an obfuscator made by the Chinese tech company Tencent, called Legu. Thankfully, there was a repo available to reverse the obfuscation, but it was out-of-date with respect to the encryption. Specifically, the repo said it supported up to 4 …
read more