A local-only Flask lab contrasting intentionally vulnerable JWT handling and hardened JWT handling. The lab demonstrates weak HMAC keys, missing expiration, excessive claims, unsigned alg:none tokens, ...
This optional walkthrough demonstrates the Shadow Realm utility using an owned virtual disk. The CLI itself does not depend on this directory. Disposable Windows x64 VMs only. Do not run this demo on ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results