EWPTX Practice Questions - EWPTX Web Application Penetration Tester EXtreme (eWPTXv3) Exam

Access More Questions

An application uses a JWT signed with RS256. The attacker changes the `alg` header to `HS256` and signs the token with the server's RSA public key as the HMAC secret. What attack is this?

JWT key injection via jwk or jku header parameters Algorithm confusion (alg:none) attack RS256-to-HS256 algorithm confusion attack JWT kid header parameter injection

Correct Answer:

RS256-to-HS256 algorithm confusion attack

Access more questions from this quiz

Continue to eWPTX Practice Questions - eWPTX Web Application Penetration Tester eXtreme (eWPTXv3) Exam for more practice questions and the full quiz experience.

Access More Questions