'jwt' 검색 결과

Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging. This should trigger for requests such as Add Spring Boot security support; Review Spring Boot security configuration; Improve API authorization in Spring Boot; Add JWT resource server security in Spring Boot; Harden Spring Boot security headers and CSRF settings. Part of cursor-rules-java project

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configures JWT Bearer authentication for .NET APIs. Includes token generation, validation, refresh tokens, and user context extraction from claims.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, and MFA. Use for: authentication, authorization, jwt, oauth, oauth2, session, login, rbac, abac, passkey, mfa, totp, api key, token, auth, cookie, csrf, cors credentials, bearer token, refresh token, oidc.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implements secure authentication patterns including login/registration, session management, JWT tokens, password hashing, cookie settings, and CSRF protection. Provides auth routes, middleware, security configurations, and threat model documentation. Use when building "authentication", "login system", "JWT auth", or "session management".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

You are helping a penetration tester exploit JWT (JSON Web Token)

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Advanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass traditional security controls. Covers business logic bypass through API call chaining and workflow manipulation. Addresses GraphQL-specific attacks including batching for credential brute-force, query depth exploitation, and introspection abuse. Includes pagination exploitation for data exfiltration, webhook hijacking for SSRF and data interception, and resource exhaustion through algorithmic complexity attacks. Covers race conditions in API transactions using parallel request techniques. Provides comprehensive JWT manipulation including algorithm confusion, kid injection, jku/x5u abuse, and claim tampering. Details API key leakage detection across source repositories, client-side code, and error messages. Covers undocumented endpoint discovery through predictable naming, debug routes, and source map analysis. Tooling includes Arjun, ParamSpider, jwt_tool, and GraphQL Voyager. Designed for a...

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external red-team engagement where 7 APKs were pulled manually, 4 download attempts truncated, and a hardcoded JWT + 30 internal API endpoints were recovered from one of the apps. Use when target has a mobile app catalogue (Play Store developer page), when you find an APK URL hosted on a web server, or when post-recon mentions 'mobile app' in scope.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

코드 구현, 버그 수정, PR 검토를 Blackbox AI에 맡깁니다. 여러 모델의 결과를 평가해 선택하고, 장시간 작업을 살피거나 저장 지점에서 작업을 재개합니다.

• 기능 구현과 버그 수정 위임
• PR의 버그와 보안 문제 검토
• 여러 AI 모델의 구현 결과 비교

Automate Docker Hub administration through Composio: create organizations and repositories, list teams, invite members, and configure webhooks that notify other services when container images are pushed to a repository.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create a Docker Hub organization or repository
• Review repositories with filters and sorting
• List teams and invite organization members

Implement and review API security within an application's existing authentication and data model. Covers token verification, resource permissions, input validation, request limits, secrets, and logging, with concrete checks for unauthorized access and invalid requests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Add authentication and permissions to an API endpoint
• Check access across users and tenant organizations
• Validate request inputs and reject extra fields

Assess REST and GraphQL API security through checks of authentication, access permissions, input validation, and request limits. The workflow guides endpoint discovery, testing, and documentation of findings and remediation within an authorized scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking API authentication and token handling
• Testing access permissions across roles and tenants
• Reviewing request limits and input validation

Investigate web applications in a CTF sandbox by tracing real browser requests, stored state, API calls, and background jobs. Compare successful and failing flows to explain authentication, routing, and differences between interface and server behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace authentication and session flows
• Compare browser state with server behavior
• Follow uploads and background jobs

Organize authorized bug bounty investigations from scope review through reconnaissance, asset discovery, vulnerability testing, and reporting. Use vulnerability-specific guides to prioritize checks and prepare reproducible findings with evidence, impact, and remediation advice.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review a bug bounty program's scope and testing rules
• Gather public information and discover target assets
• Plan API authorization and business logic checks

Assess authorized single sign-on systems using SAML, OIDC, and OAuth2. Map the login flow, check signatures, redirects, and token validation, then document reproducible findings and their impact, including identity or tenant confusion.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review redirect and token checks in a single sign-on flow
• Assess SAML signatures and assertion handling
• Investigate tenant confusion and logout failures

Connect an AI agent to Power Automate through FlowStudio MCP. This skill covers authentication, discovering available tools, reusable Python or Node.js helpers, and extracting useful data from responses too large to display directly.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up authentication for a Power Automate connection
• Discover available tools for a task
• Build a reusable Python or Node.js helper

Build and update Power Automate cloud flows through FlowStudio MCP, a connection that lets an agent use external tools. The skill guides workflow definitions, service connections, deployment, verification, and testing without opening the Power Automate portal.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build a recurring flow that sends SharePoint updates to Teams
• Add or change actions in an existing flow
• Build a flow triggered by an HTTP request

Investigate failed Power Automate cloud flows through FlowStudio MCP. Inspect each action’s inputs and outputs, trace incorrect data upstream, fix expression or data issues, and replay a previous run to check the repair.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate why a cloud flow failed
• Find null values or incorrect field paths in expressions
• Inspect HTTP error response details

Research a question by splitting it into two to five topics and assigning parallel documentation agents. Get a combined summary, detailed findings for each topic, and source URLs from web searches and documentation lookups.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Researching implementation best practices
• Comparing libraries for a project
• Looking up current framework conventions

Build server-side Zoom integrations for meeting scheduling, user management, and recording downloads. This reference guides API endpoint selection, OAuth authentication, request limits, and error diagnosis, with examples for automated workflows and event notifications.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating meeting creation and updates
• Managing Zoom users in bulk
• Downloading recordings after event notifications

Build custom browser video applications with Zoom Video SDK using JavaScript or TypeScript. Guidance covers session setup, participant video rendering, screen sharing, recording, and live transcription, with implementation patterns and troubleshooting for common integration problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building a custom browser video application
• Fixing missing participant video
• Adding screen sharing and chat

Embed Zoom meetings in web applications using either a full-page interface or a meeting container within a page. Guidance covers choosing an integration approach, backend authentication, layout customization, browser requirements, and configuration for HD video and gallery view.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Embedding Zoom meetings within a web page
• Choosing between Client View and Component View
• Troubleshooting meeting authentication and join errors

Guide development of custom Windows video applications with Zoom Video SDK and C++. Covers session setup, video display, screen sharing, and raw media access, meaning direct capture or injection of audio samples and video frames.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build a custom video calling app for Windows
• Capture or inject raw audio and video
• Implement participant video and screen sharing

Build Zoom meeting integrations in Windows C++ applications, including custom interfaces and bots that run without a visible interface. Guidance covers authentication, audio and video data access, project setup, and troubleshooting callbacks through the Windows message loop.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Embedding Zoom meetings in a Windows desktop application
• Building a meeting bot without a visible interface
• Receiving meeting audio and video data

Build custom video calling experiences with Zoom Video SDK. The skill guides session joining, audio and video control, participant event handling, and custom interfaces, with references for web, mobile, and desktop implementations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building a video calling app with a custom interface
• Implementing session joining and token authentication
• Updating video displays as participants join or leave