#jwt CTF challenges

6 CTF challenges using jwt from 6 CTFs (2020–2025), 6 with writeups.

Web · 6

Often combined with

#algorithm-confusion 2 #toprimitive 1 #sandbox-escape 1 #web 1 #nodejs-vm-escape 1 #rce 1 #weak-diffie-hellman 1 #meet-in-the-middle 1 #command-injection 1 #rs256-to-hs256 1 #jwks-spoofing 1 #cache-poisoning 1 #request-smuggling 1 #html-escape-bypass 1 #bbcode-parser 1

Challenges

Filter and sort these in the challenge browser →