--- title: Best System Weakness posts — March 2022 | daily.dev description: The most upvoted System Weakness posts from March 2022, curated by the daily.dev community. canonical: https://daily.dev/sources/systemweakness/best-of/2022/03 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/systemweakness/best-of/2022/03 og:type: website og:site_name: daily.dev og:title: Best System Weakness posts — March 2022 | daily.dev og:description: The most upvoted System Weakness posts from March 2022, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of System Weakness — March 2022 1. 1 [](https://daily.dev/posts/hacking-jwt-awguinfhw "Hacking JWT") Article System Weakness · 5y Hacking JWT This article is all about pentesting JWT. You can practice all of these techniques on vulnerable target that I have designed(will publish shortly) I will try to make the article as easy to understand in very layman language. JWT is a token mechanism which is actually designed as a means of checking authorization. 64 2. 2 [](https://daily.dev/posts/give-me-a-browser-i-ll-give-you-a-shell-hexoixive "Give me a browser, I’ll give you a Shell") Article System Weakness · 5y Give me a browser, I’ll give you a Shell The only thing you can pwn a server if you know how to use it, the wrong way. Give me a browser, I’ll give you a Shell Rend. Part One: Show Me What You Got. Part Two: Files Are Good, But A Shell Is Better. 18 3. 3 [](https://daily.dev/posts/osint-on-gmail-accounts-2swxzq4hl "OSINT ON GMAIL ACCOUNTS") Article System Weakness · 5y OSINT ON GMAIL ACCOUNTS Open Source Intelligence is gathering information that is publicly accessible. This tool can be used to obtain information about a Gmail account such as: Activated Google services (YouTube, Photos, Maps, Hangouts, etc) Possible owner’s name and profile picture. Possible YouTube channel reviews. Possible physical location. Google ID. 17 4. 4 [](https://daily.dev/posts/introduction-to-csrf-how-can-a-cookie-get-you-hacked-1-2--vpdkkfelj "Introduction to CSRF: How can a cookie get you hacked? (1/2)") Article System Weakness · 4y Introduction to CSRF: How can a cookie get you hacked? (1/2) Cross-site request forgery (CSRF) is a part of the “Broken access control” vulnerability and ranks #1 in the OWASP top 10\. CSRF is a Client-side vulnerability i.e., the attacker can use any social engineering method on the authenticated user and force him to execute an unwanted action on the web application. 13 5. 5 [](https://daily.dev/posts/tools-for-linux-system-administrator-4kmqqvwer "Tools For Linux System Administrator") Article System Weakness · 4y Tools For Linux System Administrator The security tools listed in this article span a wide range — from network security tools to intrusion detection and prevention systems. Nikto is mainly used for Web security. ClamAV helps our machines fight against malware. Lynis is a free, open source and extensible security auditing tool used by many security auditors. 12 1 [See all System Weakness archives](/sources/systemweakness/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/systemweakness/best-of/2022/03#page","url":"https://daily.dev/sources/systemweakness/best-of/2022/03","name":"Best System Weakness Posts — March 2022","description":"The most upvoted System Weakness posts from March 2022, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/systemweakness/best-of/2022/03#items","numberOfItems":5,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/hacking-jwt-awguinfhw","name":"Hacking JWT"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/give-me-a-browser-i-ll-give-you-a-shell-hexoixive","name":"Give me a browser, I’ll give you a Shell"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/osint-on-gmail-accounts-2swxzq4hl","name":"OSINT ON GMAIL ACCOUNTS"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/introduction-to-csrf-how-can-a-cookie-get-you-hacked-1-2--vpdkkfelj","name":"Introduction to CSRF: How can a cookie get you hacked? (1/2)"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/tools-for-linux-system-administrator-4kmqqvwer","name":"Tools For Linux System Administrator"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"System Weakness","item":"https://daily.dev/sources/systemweakness"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/systemweakness/best-of"},{"@type":"ListItem","position":5,"name":"March 2022"}]}]} ```