Loading…

Andrax Pentester

Cybersecurity research, education, and tooling

All Systems Operational · Research Verified

Security Dispatches

Get notified when new 0-day disclosures and CTF writeups publish.

Email for newsletter

Intelligence

Articles
Research
Writeups
Tutorials
Security Tools
Resources
Learn
Labs

MCP Security

MCP Scanner
Server Directory
MCP Dorks Search
Browser Extension
Hardening Lab
Methodology
Scanning Policy
State of MCP
Developer API

Discovery

Search Index
Categories
Vulnerability Tags
RSS XML Feed
JSON API Feed
LLMs Knowledge (llms.txt)

Organization

About Project
Lead Researcher
SentinelReign
Platform Roadmap
Indian Armed Forces Tribute

Access

Apply as Researcher
Member Sign In
Create Account
Research Dashboard

Independent Security Network

Andrax Pentester operates as an autonomous cybersecurity laboratory under the SentinelReign research umbrella.

sentinelreign.com Our Mission

Strict Ethical Guidelines · Educational Purpose Only

OAuth — Andrax Pentester

Tag

OAuth

Published work tagged OAuth.

Items2

All Categories Articles Tutorials Research Writeups

ArticleWeb & API Security

What Is a JWT? JSON Web Tokens Explained (2026)

A JWT is a signed bundle of JSON claims. Here is how to read one, why decoding is not verifying, and how to check for the classic JWT security flaws.

Syed Zada Abrar · 9 min

Article

MCP Security

How to Vet an MCP Server Before You Connect It to an Agent

This checklist shows how to vet an MCP server before an agent touches it, from provenance and reading a published grade honestly to auth, version pinning and cr…

Syed Zada Abrar · 10 min