Results for “jwt”
41 skills
nivkazdan jwt-token-validator
Validate jwt token validator operations. Auto-activating skill for Security Fundamentals. Triggers on: jwt token validator, jwt token validator Part of the Security Fundamentals skill category. Use when working with jwt token validator functionality. Trigger with phrases like "jwt token validator", "jwt validator", "jwt".
4
aibot88 jwt
JWT implementation, token management, refresh patterns, and security.
3 · bundle
a5c-ai jwt
JWT implementation, token management, refresh patterns, and security.
1.7k · bundle
mukul975 implementing-jwt-signing-and-verification
Implement secure JWT signing and verification with HMAC-SHA256, RSA-PSS, and EdDSA, including token expiration, claims validation, and defense against common JWT attacks.
24.6k · bundle
mukul975 performing-jwt-none-algorithm-attack
Test JWT signature verification bypass by crafting tokens with the 'none' algorithm.
24.6k · bundle
keyargo jwt-decode
Decode and inspect a JWT (header, claims, expiry) without verifying signature
118 · bundle
More results
mukul975 exploiting-jwt-algorithm-confusion-attack
Exploit JWT algorithm confusion vulnerabilities by manipulating the alg header to switch from RS256 to HS256, set alg to none, or inject kid/jku/x5u headers to bypass signature verification.
24.6k · bundle
shulkwisec jwt-authentication-complete-deep-dive
Provides exact payloads and bypass techniques for every PortSwigger JWT authentication lab variant, from unverified signatures to algorithm confusion attacks.
21 · bundle
mukul975 testing-jwt-token-security
Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
24.6k · bundle
mukul975 testing-for-json-web-token-vulnerabilities
Test JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.
24.6k · bundle
azusagasaku quarkus-security
Quarkus 安全最佳实践——认证、授权、JWT/OIDC、RBAC、输入验证、CORS 加固及 OWASP 缓解
0
luokai0 azure-auth
Implements Microsoft Entra ID authentication for React SPAs using MSAL.js and validates JWTs in Cloudflare Workers with jose, covering Authorization Code Flow with PKCE and common error fixes.
10 · bundle
shulkwisec auth-sec
Routes authentication and authorization testing efforts by identifying the primary attack surface — login mechanics, object authorization, browser trust boundaries, or identity protocols such as JWT/OAuth/SAML — before selecting a deeper skill.
21
mcollina oauth
Implements OAuth 2.0/2.1 authorization flows in Fastify applications, including authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints.
1.9k · bundle
affaan-m quarkus-security
Secure Quarkus applications with authentication, authorization, input validation, and secrets management.
226k
sakamoto-family-smile quarkus-security
Secure Quarkus applications with authentication, authorization, input validation, and secrets management best practices.
0
hoangnguyen0403 nestjs-security
Implement JWT authentication, RBAC guards, Helmet hardening, and Argon2 hashing in NestJS. Use when adding auth strategies, role-based access control, CSRF protection, or security headers.
542 · bundle
coreyone auth-and-identity-rules
Trigger: OAuth 2.1, JWT session, Secure cookies, Keychain storage, auth flow, user authentication. Scope: User authentication, session storage, authorization boundaries. Boundary: Excludes generic data caching.
1 · bundle
zhaoxuya520 identity-federation
Authorized assessment of federated identity systems covering SAML, OIDC, and OAuth2 flows, SSO misconfigurations, and token confusion issues.
12.8k · bundle
zhaoxuya520 api-security
Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.
12.8k · bundle
huuanh20 backend-mindset
Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.
1 · bundle
luokai0 api-security
Implements secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities.
10 · bundle
aibot88 auth
Modern authentication and security patterns for web applications. Expert in JWT tokens, OAuth2 flows, session management, RBAC, MFA, API security, and zero-trust architectures. Framework-agnostic patterns that work with any tech stack.
3 · bundle
affaan-m springboot-security
Provides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.
226k
shulkwisec api-sec
Routes API security testing into recon, authorization, token abuse, or hidden-parameter workflows based on observed endpoint characteristics.
21
arustydev auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
8 · bundle
jeffallan secure-code-guardian
Guides implementing authentication, authorization, input validation, and OWASP Top 10 prevention with secure code patterns and validation checkpoints.
10.4k · bundle
luokai0 cognito
Builds, configures, and manages AWS Cognito user pools, identity pools, authentication flows, and integrations with other AWS services.
10 · bundle
mukul975 implementing-endpoint-detection-with-wazuh
Deploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, and automated response actions.
24.6k · bundle
mukul975 testing-api-authentication-weaknesses
Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws.
24.6k · bundle
zhaoxuya520 competition-oauth-oidc-chain
Maps and reproduces OAuth/OIDC authentication chains by tracing redirects, token exchange, and identity acceptance in controlled environments.
12.8k · bundle
itsmostafa api-gateway
Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.
1.1k · bundle
dangquangse backend-mindset
Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.
19 · bundle
agentskillexchange oauth2-flow-debugger
Inspects and debugs OAuth 2.0 authorization flows including PKCE, client credentials, and device code grants, validating tokens, decoding claims, and tracing redirect chains.
28
jeffallan fastapi-expert
Build high-performance async Python APIs with FastAPI and Pydantic V2, including REST endpoints, authentication, async database operations, and WebSocket support.
10.4k · bundle
mukul975 testing-mobile-api-authentication
Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities.
24.6k · bundle