hashcat 2 JWT Secret Cracking & Privilege Escalation via Forged Tokens | Tally May 14, 2026 Weak Session Token Design – Predictable MD5-Based Session Hijacking | CopyPasta May 7, 2026