Skip to main content

RS/HS Confusion

Generate a token that advertises HS256 while JWTForge uses its RSA key path:

{
  "vulnerability": "rs_hs_confusion",
  "body": {
    "sub": "admin"
  }
}
POST /token
Request
{
  "vulnerability": "rs_hs_confusion",
  "body": {
    "sub": "admin"
  }
}
Response
No response yet
Decoded token
No token yet