Pingiskok.

Bugs, vulnerabilities and security research. Web2, Web3, Bug Bounty

$ cat /etc/motd

20.03.2026 jwt security web auth

JWT, Part 2: JWT Anatomy - dissecting the token byte by byte

Taking a real token and dissecting it like a pathologist: header, payload, signature, Base64url, claims, edge cases.

20.03.2026 jwt security web auth

70+ CVEs over ten years. A bug from 2015 still fires in 2026. Let's figure out why JWT stubbornly remains broken.