JWT XI

In this exercise, you'll learn how to exploit the <code>jku</code> header in a JWT token to forge a token that grants admin access. This involves using a header injection vulnerability to bypass URL restrictions and serve a malicious JWK file.

Skills covered

Topics