Execute and test the JWT none algorithm attack, crafting tokens with the alg header set to none using PyJWT and an intercepting proxy (Burp Suite/mitmproxy) to bypass signature verification and forge arbitrary claims. Use during authorized penetration tests or security assessments of applications that use JWT for authentication or authorization, to validate that the server rejects unsigned tokens.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-jwt-none-algorithm-attacknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-jwt-none-algorithm-attack -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-jwt-none-algorithm-attack -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-jwt-none-algorithm-attackgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-jwt-none-algorithm-attackgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-jwt-none-algorithm-attack ~/.claude/skills/performing-jwt-none-algorithm-attack # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-jwt-none-algorithm-attack ~/.agents/skills/performing-jwt-none-algorithm-attack # Codex, Cursor, Gemini CLI, Copilot, OpenCode