“jwt”的搜索结果

Assess session management weaknesses, including sessions that survive logout or password changes, fixed session IDs, and refresh-token reuse. The skill uses two real sessions, response-body comparisons, and control checks to distinguish continued account access from misleading successful responses.

中文简介正在准备中。当前显示英语简介。

• Check whether old sessions survive logout
• Verify session invalidation after a password change
• Test refresh-token rotation and reuse detection

Exploits JWT algorithm confusion vulnerabilities where the server's token verification library accepts the algorithm specified in the JWT header rather than enforcing a fixed algorithm. The tester manipulates the alg header to switch from RS256 to HS256 (using the RSA public key as the HMAC secret), sets alg to none to bypass signature verification, or exploits kid/jku/x5u header injection to supply attacker-controlled keys. Activates for requests involving JWT algorithm confusion, alg none a...

中文简介正在准备中。当前显示原文说明。

JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.

中文简介正在准备中。当前显示原文说明。

Hunt JWT cryptographic failures — alg:none signature-stripping and RS256→HS256 key-confusion that let an attacker forge a token for any identity (e.g. an admin) without knowing a secret. Use when the app authenticates with a JSON Web Token (an `eyJ...` Bearer token in the Authorization header, a cookie, or a login response). This skill OWNS JWT signature/crypto forgery (alg:none, key confusion, kid/jku header injection); hunt-ato covers JWT as one ATO path, hunt-auth-bypass covers SSO/SAML token trust, hunt-api-misconfig covers non-crypto JWT handling. Critical when a forged token grants access to another user's data or an admin-only endpoint.

中文简介正在准备中。当前显示原文说明。

Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.

中文简介正在准备中。当前显示原文说明。

Embed Zoom meetings in an Electron desktop app using the Meeting SDK. The skill guides developers through initialization, token-based authentication, joining and starting meetings, settings controls, and integration with raw meeting data.

中文简介正在准备中。当前显示英语简介。

• Embed Zoom meetings in an Electron app
• Design authentication and meeting entry flows
• Organize SDK services, controllers, and events

Expose REST APIs as tools for AI agents through Google Cloud API Gateway using MCP, a protocol for connecting agents to tools. Covers OpenAPI migration, authentication, client connections, validation, and troubleshooting.

中文简介正在准备中。当前显示英语简介。

• Expose existing REST APIs as agent tools
• Migrate OpenAPI 2.0 specifications for MCP
• Protect tool listings with JWTs or API keys

Design authentication and access permissions for web apps, mobile apps, and backend services using OAuth 2.0 and OpenID Connect. Get guidance on authorization flows, token validation, secure storage, renewal, and revocation.

中文简介正在准备中。当前显示英语简介。

• Add login to a web or mobile app
• Review token storage and renewal
• Design access permissions between services

Inspect Android apps for embedded credentials, internal API addresses, and components exposed to other apps. The skill guides APK acquisition, code inspection, and runtime traffic analysis to support a mobile security assessment.

中文简介正在准备中。当前显示英语简介。

• Inventory Android apps included in a security assessment
• Check APKs for embedded credentials and internal API addresses
• Review components that other apps can invoke

Compare login approaches and authentication providers, then use implementation examples and security checklists to plan or review an app’s login flow. Covers sessions, tokens, external login providers, passkeys, and common implementation mistakes.

中文简介正在准备中。当前显示英语简介。

• Choose a login approach for a new app
• Compare NextAuth / Auth.js, Clerk, and Supabase Auth
• Review token storage and refresh behavior

Use when testing JWT-based authentication for algorithm confusion, alg:none bypass, weak HMAC secrets, missing expiration, kid parameter injection, and token storage in localStorage. Trigger on: Authorization: Bearer tokens, JWTs in cookies, any base64url encoded header.payload.signature pattern, OAuth2 access tokens, API authentication tokens, SSO tokens, JWKS endpoints. Detects RS256→HS256 confusion, public key as HMAC secret, unverified kid values used in file reads or SQL queries, and JWT cracking with short secrets.

中文简介正在准备中。当前显示原文说明。

Exploit JSON Web Tokens (JWT) by implementing the 'None' algorithm attack. This skill details how to bypass authentication mechanisms when a server improperly accepts JWTs with the `alg` header set to `none`, allowing attackers to forge tokens without a valid signature.

中文简介正在准备中。当前显示原文说明。

JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. bu skill covers implementing secure JWT signing with HMAC-SHA256

中文简介正在准备中。当前显示原文说明。

Web uygulamalarında JWT bypass — alg:none, CVE-2022-39227, SSRF zinciri

中文简介正在准备中。当前显示原文说明。

Manage Sub2API through its administrator API using a bundled command-line tool. Inspect and update accounts, manage redeem codes, groups, and proxies, import or export accounts, and verify changes with follow-up reads.

中文简介正在准备中。当前显示英语简介。

• Reviewing account details and usage before updating settings
• Importing, exporting, or updating multiple accounts
• Generating and redeeming recharge or balance codes

Assess authorized APIs through a ten-stage workflow covering endpoint discovery, authentication, access permissions, input handling, and request limits. Collect reproducible evidence and turn findings into regression checks that can run in a development pipeline.

中文简介正在准备中。当前显示英语简介。

• Review API authentication and access permissions
• Assess GraphQL and WebSocket security
• Check request limits and unintended data exposure

Build custom mobile video experiences in React Native with Zoom Video SDK. Get guidance on setup, joining sessions, routing events into interface state, using helper APIs, and keeping session token generation on the backend.

中文简介正在准备中。当前显示英语简介。

• Build a custom video interface in a React Native app
• Implement session joining with backend-issued tokens
• Connect session events to interface state

Embed Zoom meetings in React Native iOS and Android apps using @zoom/meetingsdk-react-native. Get guidance on setup, authentication, joining and starting meetings, cleanup, and troubleshooting communication between JavaScript and native SDK components.

中文简介正在准备中。当前显示英语简介。

• Adding Zoom meeting participation to a React Native app
• Implementing host meeting starts with ZAK
• Investigating iOS and Android setup or native bridge issues

Build transcription workflows for uploaded or stored audio and video using Zoom AI Services Scribe. Consult guidance on authentication, single-file requests, batch jobs, completion notifications, and saving transcript results for further processing.

中文简介正在准备中。当前显示英语简介。

• Adding transcription for uploaded recordings
• Transcribing stored call archives in batches
• Saving transcripts after job completion notifications

Implement and debug Google OAuth 2.0 refresh tokens bound to a client key. Covers key generation, signed DPoP proofs that demonstrate key possession, and nonce challenge retries in WebCrypto and JavaScript environments.

中文简介正在准备中。当前显示英语简介。

• Bind Google OAuth refresh tokens to a client key
• Debug DPoP proof signatures and nonce retries
• Plan a backend for a browser application using DPoP

Guides backend development for Node.js, Express, and Next.js API routes. It covers separating application logic from data access, reducing database queries, caching, authentication, error handling, and background jobs through concrete implementation examples.

中文简介正在准备中。当前显示英语简介。

• Separating application logic from database access
• Reducing database queries and adding caching
• Adding authentication, permissions, and request limits

Strix JWT 与 OIDC 安全测试手册,覆盖令牌伪造、算法混淆与声明篡改;触发名:strix-authentication-jwt

中文简介正在准备中。当前显示原文说明。

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.

中文简介正在准备中。当前显示原文说明。

Use when an application issues and validates its own first-party JWT access and refresh tokens, including authentication filters, password encoding, RBAC, and method security. For JWTs issued by Keycloak, Auth0, Okta, Cognito, or another authorization server, use oauth2-resource-server.

中文简介正在准备中。当前显示原文说明。