JWT Alg Confusion Probe
Paid JWT algorithm-confusion + kid-injection + JWKS-header-hijack probe (cycle 153) - forges 12 forged-JWT attack classes (alg:none variants + kid-injection variants + jku/jwk/x5u attacker-controlled) and (when public_key supplied) RS256->HS256 key confusion. Per-attack response-status check (success = 200/201/202/203/204/302/304/307). Returns jwt_alg_confusion_score 0-100 A-F + verdict...
- Price per call
- $0.000
- Chain
- Base
- Method
- GET
- Paid calls · 30 days
- 0
Call it from code
This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.
import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });
const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://yizof-38-190-144-122.free.pinggy.net/api/jwt-alg-confusion-probe", { method: "GET" });
console.log(await res.json());https://yizof-38-190-144-122.free.pinggy.net/api/jwt-alg-confusion-probe