Field
Real bug-bounty disclosures and technique breakdowns — distilled from the field.
criticalAuthentication5 min read
JWT alg confusion: forging tokens by switching RS256 to HS256
The public key, served at a well-known endpoint, was accepted as an HMAC secret when the alg header was changed.
an
anon· 5 min readRead writeup