Pasindu's Blog

Home

❯

PortSwigger Labs

❯

JWT

JWT

Jun 22, 20261 min read

JWT - PortSwigger Practice Lab



8 items under this folder.

  • Jul 05, 2026

    JWT authentication bypass via algorithm confusion with no exposed key

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via algorithm confusion

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via flawed signature verification

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via jku header injection

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via jwk header injection

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via kid header path traversal

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via unverified signature

    • PortSwigger
  • Jul 05, 2026

    JWT authentication bypass via weak signing key

    • PortSwigger

Created with Quartz v4.5.2 © 2026

  • GitHub
  • Discord Community