Skip to main content

jku Injection

Generate a token with an attacker-controlled JWKS URL:

{
  "vulnerability": "jku_injection",
  "body": {
    "sub": "user123"
  }
}
POST /token
Request
{
  "vulnerability": "jku_injection",
  "body": {
    "sub": "user123"
  }
}
Response
No response yet
Decoded token
No token yet