AI & Machine Learning

Competition JWT Claim Confusion

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim acceptance, audience and issuer checks, role derivation, and token-to-identity confusion bugs. Use when the user asks to inspect JWT headers or claims, key lookup, `kid` handling, `alg` confusion, audience or issuer validation, role claims, or explain how a token becomes accepted identity or privilege. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

Publisher / source
zhaoxuya520/reverse-skill (found on skills.sh, an awesome list, the CSV list)
Upstream record
zhaoxuya520/reverse-skill
Version
Version 2
Published
Publication review
Approved for publication
Content fingerprint
f470a0467fdfe41accc0941d76976fb2d0f00ac21d29d49c049daf9d9274c7a5