APKPure Appを使用する
JWT Misconfigurationの旧いバージョンをダウンロードすることが可能
JSONWebトークンの再生や改ざんなどのメタデータ操作
Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information disclosure, modification or destruction of all data, or performing a business function outside of the limits of the user. Common access control vulnerabilities include:
Metadata manipulation, such as replaying or tampering with a JSON Web Token (JWT) access control token or a cookie or hidden field manipulated to elevate privileges, or abusing JWT invalidation.