Any labs to practice JWT Key confusion vulnerability?
Hello, do you know any free labs where I can practice with a webapp vulnerable to JWT Key Confusion?
Ideally a webapp with the JWT being sent in the Authorization header. I am developing a tool to test this vulnerability and I’d like to try it somewhere.
submitted by /u/lettuce749
[link] [comments]