A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.
☆333May 3, 2024Updated 2 years ago
Alternatives and similar repositories for jwtcat
Users that are interested in jwtcat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple HS256, HS384 & HS512 JWT token brute force cracker.☆1,183Jul 13, 2024Updated 2 years ago
- Security Testing Scripts for JWT☆332Mar 13, 2026Updated 7 months ago
- Crack the shared secret of a HS256-signed JWT☆259Mar 13, 2026Updated 7 months ago
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,809May 1, 2025Updated last year
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,816Apr 26, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- JWT brute force cracker written in C☆2,566Jun 2, 2023Updated 3 years ago
- yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage☆121Nov 30, 2017Updated 8 years ago
- Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in…☆31Sep 4, 2025Updated last year
- A repository with 3 tools for pwn'ing websites with .git repositories available☆4,188Sep 29, 2026Updated last month
- Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.☆65Nov 29, 2022Updated 3 years ago
- Scripts to help with different ffuf tasks and workflows☆228Dec 24, 2023Updated 2 years ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,459Sep 13, 2024Updated 2 years ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,202Apr 3, 2026Updated 7 months ago
- Notes about attacking Jenkins servers☆2,101Jul 10, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,215Apr 21, 2024Updated 2 years ago
- InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable…☆1,814Nov 1, 2026Updated last week
- SSRF (Server Side Request Forgery) testing resources☆2,510Oct 12, 2024Updated 2 years ago
- Wordlist for content(directory) bruteforce discovering with Burp or dirsearch☆219Oct 12, 2024Updated 2 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Jul 29, 2019Updated 7 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆743May 4, 2019Updated 7 years ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆691Jan 28, 2024Updated 2 years ago
- JSON Web Token Hack Toolkit☆1,090Nov 1, 2026Updated last week
- Java Binary data Deserializer/Serializer - Convert serialized Java Objects into readable XML☆13Feb 25, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- List of custom Nuclei templates☆16Nov 4, 2023Updated 3 years ago
- CVE-2024-23897 jenkins-cli☆15Jan 27, 2024Updated 2 years ago
- IIS shortname scanner written in Go☆360Mar 25, 2023Updated 3 years ago
- Create tar/zip archives that can exploit directory traversal vulnerabilities☆1,060Jun 3, 2021Updated 5 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,648Aug 10, 2026Updated 2 months ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- latest version of scanners for IIS short filename (8.3) disclosure vulnerability☆1,703Sep 3, 2023Updated 3 years ago
- Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.☆110Feb 14, 2022Updated 4 years ago
- Making Favicon.ico based Recon Great again !☆1,318Aug 29, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,433Apr 18, 2023Updated 3 years ago
- A Go implementation of dirsearch.☆280Sep 27, 2021Updated 5 years ago
- File upload vulnerability scanner and exploitation tool.☆3,341May 8, 2025Updated last year
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆94Jul 9, 2025Updated last year
- A python script that finds endpoints in JavaScript files☆4,473Apr 13, 2024Updated 2 years ago
- HTTP parameter discovery suite.☆6,435Feb 20, 2025Updated last year
- ☆2,339Aug 26, 2026Updated 2 months ago