OSCP-CPTS NOTES
⌘Ctrlk
TwitterGithubLinkedinInstagramDiscordSupport Me
OSCP-CPTS NOTES
  • 🛡️oscp-cpts-notes
  • Pivoting & Tunneling
  • Linux Privilege Escalation
  • Windows Privilege Escalation
  • Active Directory Attacks
    • RED TEAMING
    • BugForge
    • OAuth Attacks
    • JWT ATTACKS
      • JWT Signature Verification Bypass
      • JWT Accepting Unsigned Tokens (alg: none)
      • JWT Brute-forcing secret keys (weak signing key)
      • JWT header parameter injections (jwk injection)
      • JWT header parameter injections (jku injection)
      • JWT algorithm confusion Vulnerabilities
      • JWT ATTACK Labs
        • Lab 1 JWT authentication bypass via unverified signature
        • Lab 2 JWT authentication bypass via flawed signature verification
        • Lab 3 JWT authentication bypass via weak signing key
        • Lab 4 JWT authentication bypass via jwk header injection
        • Lab 5 JWT authentication bypass via jku header injection
        • Lab 6 JWT authentication bypass via kid header path traversal
        • Lab 7 JWT authentication bypass via algorithm confusion
    • Authentication Attacks
    • Business Logic Vulnerability
    • Information Disclosure
    • Race Conditions
    • Access Control Vulnerabilities
    • SSRF - Server Side Request Forgery Attacks
    • CSRF - Cross Site Request Forgery Attacks
    • CORS - Cross-Origin Resource Sharing Attacks
    • Cross-Site Scripting (XSS)
Powered by GitBook
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. Web Application Pentest
  2. JWT ATTACKS

JWT ATTACK Labs

Lab 1 JWT authentication bypass via unverified signatureLab 2 JWT authentication bypass via flawed signature verificationLab 3 JWT authentication bypass via weak signing keyLab 4 JWT authentication bypass via jwk header injectionLab 5 JWT authentication bypass via jku header injectionLab 6 JWT authentication bypass via kid header path traversalLab 7 JWT authentication bypass via algorithm confusion
PreviousJWT algorithm confusion VulnerabilitiesNextLab 1 JWT authentication bypass via unverified signature