JWT Timing Sidechannel

Paid JWT HS256 signature-timing sidechannel probe (cycle 152, x402 $0.001) - forges 32 HS256 JWTs varying the LAST signature byte, sends each (default 12 iterations) against target's Authorization: Bearer header, measures per-byte response timing via stdlib time.monotonic, detects non-constant-time HMAC verification (a classic JWT forgery primitive). Returns per_byte_stats {min_ms,max_ms,median_ms

Open endpoint ↗

Price per call: $0.000
Chain: Base
Method: GET
Paid calls · 30 days: 0

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://otzik-38-190-144-122.run.pinggy-free.link/api/jwt-timing-sidechannel", { method: "GET" });
console.log(await res.json());

https://otzik-38-190-144-122.run.pinggy-free.link/api/jwt-timing-sidechannel