{"slug":"snailsploit-offensive-jwt","source_name":"snailsploit/offensive-jwt","name":"Snailsploit/Offensive JWT","description":"JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.","version":1,"lift":{"pass_rate_delta_pts":12.5,"pass_rate_pct":91.7,"total_cases":24,"passed_cases":22,"tokens_delta_pct":148.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-12T07:10:00.002420+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":12.5,"with_pass_pct":91.7,"without_pass_pct":79.2,"tokens_delta_pct":148.3,"turns_delta_pct":0,"total_cases":24,"cases_aggregated":24,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-12T07:10:00.002420+00:00","run_id":"6bf937a6-6865-4310-908c-7c1956b46aed","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"b040d35209456c369ed373fa29a0eb62836f7fbc1082713ebea3d4dcf3d3b70f","raw_url":"https://app.decimal.ai/s/snailsploit-offensive-jwt/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/snailsploit-offensive-jwt"}