> For the complete documentation index, see [llms.txt](https://books.spartan-cybersec.com/web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://books.spartan-cybersec.com/web/jwt.md).

# JWT

- [¿JWT?](https://books.spartan-cybersec.com/web/jwt/jwt.md)
- [Lab 1: JWT authentication bypass via unverified signature](https://books.spartan-cybersec.com/web/jwt/lab-1-jwt-authentication-bypass-via-unverified-signature.md): https://portswigger.net/web-security/jwt/lab-jwt-authentication-bypass-via-unverified-signature
- [Lab 2: JWT authentication bypass via flawed signature verification](https://books.spartan-cybersec.com/web/jwt/lab-2-jwt-authentication-bypass-via-flawed-signature-verification.md): https://portswigger.net/web-security/jwt/lab-jwt-authentication-bypass-via-flawed-signature-verification
- [Lab 3: JWT authentication bypass via weak signing key](https://books.spartan-cybersec.com/web/jwt/lab-3-jwt-authentication-bypass-via-weak-signing-key.md): https://portswigger.net/web-security/jwt/lab-jwt-authentication-bypass-via-weak-signing-key
- [Lab 4: JWT authentication bypass via jwk header injection](https://books.spartan-cybersec.com/web/jwt/lab-4-jwt-authentication-bypass-via-jwk-header-injection.md): https://portswigger.net/web-security/jwt/lab-jwt-authentication-bypass-via-jwk-header-injection
- [Lab 5: JWT authentication bypass via jku header injection](https://books.spartan-cybersec.com/web/jwt/lab-5-jwt-authentication-bypass-via-jku-header-injection.md): https://portswigger.net/web-security/jwt/lab-jwt-authentication-bypass-via-jku-header-injection