Unverified50% confidenceCautionExact time
JWT存在算法混淆攻击风险，例如将RS256篡改为HS256
1
Sources
50%
Confidence
Long-term
Relevance
8/6/2026
First Seen
Sources
Related Claims
UnverifiedHS256使用对称密钥适合单体服务，RS256使用非对称密钥对适合微服务场景63% similarUnverifiedLog4j漏洞（CVE-2021-44228）允许攻击者通过特制字符串触发JNDI查找实现无需认证的远程代码执行63% similarUnverified门禁控制器的Wiegand协议存在明文传输被复制风险，高安全场景应优先选支持OSDP(RS485加密)协议的控制器与读头，防止线路窃听伪造卡数据62% similarUnverified爱搜网（ISO官网）登录接口使用了魔改SHA-1算法和2万多行混淆JS代码来保护加密参数61% similarUnverified极验的防护体系通常包含三个层次：前端JS混淆、动态参数加密、服务端风控61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/693372API
curl https://kongchang.com/api/v1/knowledge/claims/693372MCP
get_claim(id=693372)