Skip to main content

Malicious Mode

malicious injects attack strings into selected claims or header fields.

{
  "mode": "malicious",
  "malicious_category": "sql_injection",
  "body": {
    "sub": "user123",
    "email": "user@example.com"
  }
}
POST /token
Request
{
  "mode": "malicious",
  "malicious_category": "sql_injection",
  "body": {
    "sub": "user123",
    "email": "user@example.com"
  }
}
Response
No response yet
Decoded token
No token yet

Supported categories include SQL injection, XSS, path traversal, command injection, LDAP injection, NoSQL injection, XML injection, template injection, header injection, and buffer overflow.