Locked JWT Tool - A Toolkit For Testing, Tweaking And Cracking JSON Web Tokens

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

jwt_tool.py is a toolkit for validating, forging and cracking JWTs (JSON Web Tokens).

Its functionality includes:

•     Checking the validity of a token
•     Testing for the RS/HS256 public key mismatch vulnerability
•     Testing for the alg=None signature-bypass vulnerability
•     Testing the validity of a secret/key/key file
•     Identifying weak keys via a High-speed Dictionary Attack
•     Forging new token header and payload values and creating a new signature with the key or via another attack method

This is the hidden content, please

• Sign In
• or
• Sign Up