JWT ATTACK Labs
Lab 1 JWT authentication bypass via unverified signatureLab 2 JWT authentication bypass via flawed signature verificationLab 3 JWT authentication bypass via weak signing keyLab 4 JWT authentication bypass via jwk header injectionLab 5 JWT authentication bypass via jku header injectionLab 6 JWT authentication bypass via kid header path traversalLab 7 JWT authentication bypass via algorithm confusion