Any labs to practice JWT Key confusion vulnerability?

Hello, do you know any free labs where I can practice with a webapp vulnerable to JWT Key Confusion?

Ideally a webapp with the JWT being sent in the Authorization header. I am developing a tool to test this vulnerability and I'd like to try it somewhere.

submitted by /u/lettuce749
[link] [comments]

from hacking: security in practice https://ift.tt/GLeitR2

Comments