hellodqy/mastermind-bug-bounty/jwt-attack
Claude Code and agent skill by hellodqy/mastermind-bug-bounty
Trust tier 3
- community
Source check pending
Checking that the SKILL.md file is still in the repository.
Reason about JWT trust boundaries and whether token control can become privilege escalation.
Install
npx vskill@latest install hellodqy/mastermind-bug-bounty/jwt-attackSKILL.md
JWT Attack
Goal
判断 JWT 是否能被伪造、篡改、替换或用于跨角色访问，并把成功结果回注到所有相关接口。
Tools / Inputs
- JWT token、header/payload/signature、JS 关键字、泄露 secret、角色字段
- 资源索引：
references/INDEX.md；候选资源：jwt-analysis.md
Constraints
- 不把“能解码 JWT”当漏洞。
- 必须验证签名绕过、伪造或权限提升是否真实生效。
- 成功拿到新身份后重测高价值接口。
- 不爆破生产高风险目标；优先用已泄露或上下文词典。
- 失败结果记录为认证边界证据。
Chain Questions
- payload 里哪些字段控制身份、角色、租户或权限？
- secret 是否来自 JS、源码泄露或配置泄露？
- 伪造 token 能否访问管理、导出、配置或用户列表？
- 新 token 是否能扩大 value-pool linkage？
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/jwt_attack/SKILL.md
Popularity
- 7-day trend score
- 5
Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/hellodqy/mastermind-bug-bounty/jwt-attack)