Technologies
Part of 01 Web in the Web Application Testing Cheatsheet.
Cross-cutting web technologies that do not belong to a single language or framework: token formats and authorization protocols. Both files in this section are high-value targets - a single misconfiguration in either can lead to full authentication bypass or account takeover.
Files
| File | Description |
|---|---|
| JWT.md | JSON Web Tokens - algorithm confusion, none algorithm, weak keys, key injection, and claim tampering. |
| OAuth.md | OAuth 2.0 and OpenID Connect - redirect URI abuse, CSRF on the callback, token leakage, and misconfigured flows. |
See 01 Web README for the full subcategory map.