⌘Ctrlk

JWT

Introduction Lab 1 - Unverified Signature Lab 2 - Flawed Signature Verification Lab 3 - Weak Signing Key JWT Header Parameter Injection Lab 4 - Jwk Header Injection Lab 5 - Injecting Self Signed JWT via jku parameter Lab 6 - Injecting Self Signed JWT via kid parameter Algorithm Confusion Attacks Lab 7 - JWT bypass via algorithm confusion Lab 8 - JWT bypass via algorithm confusion with no exposed key

PreviousLab 9 - Vim Technique & B64 NextIntroduction