jwt-attacks

Here are 4 public repositories matching this topic...

uphiago / recon-skills

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

penetration-testing bug-bounty wordpress-security offensive-security red-team ssrf security-automation reconnaissance cloud-security subdomain-enumeration supabase firebase-hacking jwt-attacks hermes-agent cors-exploitation

Updated Sep 1, 2026
Python

kedi / jwt-attacker

Star

tool to test and exploit common JWT security issues such as weak signing keys, alg:none bypasses, and RS/HS confusion attacks.

security jwt jwt-attacks

Updated Jul 5, 2025
Python

Zeeshanafridai / jwt-attack-suite

Star

A comprehensive JWT attack CLI covering every major vulnerability class — from alg:none bypass to RS256→HS256 algorithm confusion, HMAC secret bruteforce, kid header injection (SQLi + path traversal), jku/x5u spoofing with built-in JWKS server, and full token forgery. Built for bug bounty hunters and red teamers.

jwt web-security json-web-token jwt-security penetration-testing-tools bug-bounty-tools jwt-attacks token-forgery algorithm-confusion

Updated Aug 2, 2026
Python

tarekedemrdash / jwtkit

Star

JWT security analysis and forgery toolkit for authorized testing

python security jwt bug-bounty pentesting appsec jwt-attacks

Updated Aug 17, 2026
Python

Add this topic to your repo

To associate your repository with the jwt-attacks topic, visit your repo's landing page and select "manage topics."

Learn more