Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Identifies JSON Web Tokens (JWTs) where the signing algorithm in the header ('alg') is set to 'none'. A server that incorrectly trusts this header may skip signature validation, allowing an attacker to create arbitrary tokens and bypass authentication controls.
avatar
Tim Peck@timpeck
avatar
Detections.ai Community
10 months ago
5054