JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.
☆55Mar 19, 2026Updated 6 months ago
Alternatives and similar repositories for JWTLens
Users that are interested in JWTLens are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆32May 23, 2026Updated 3 months ago
- A natural evolution of a evolution of Burp Suite's Repeater tool☆16Sep 1, 2026Updated 2 weeks ago
- A full-stack web application that aggregates all HackerOne bug bounty programs that have source code repositories (GitHub, GitLab, Bitbuc…☆17Mar 16, 2026Updated 6 months ago
- This is a PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆18Jul 21, 2025Updated last year
- List of Bchecks & Bambdas that i personaly use☆10Mar 22, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆15Mar 24, 2026Updated 5 months ago
- ☆24Apr 17, 2026Updated 5 months ago
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆22Mar 10, 2026Updated 6 months ago
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- ☆18Oct 4, 2020Updated 5 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 2 years ago
- Search-driven OSINT and reconnaissance toolkit for web and GitHub discovery.☆41Updated this week
- Modern Bypass 403☆30Apr 28, 2026Updated 4 months ago
- Advanced Command and Control Framework for Authorized Red Team Operations☆55Mar 1, 2026Updated 6 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆59Nov 6, 2025Updated 10 months ago
- Password:ВсеБудеУкраїна☆17Mar 21, 2022Updated 4 years ago
- CVE 2025 27237 Zabbix LPE proof of concept.☆19Jan 26, 2026Updated 7 months ago
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- Repository containing sample apps and Frida scripts for bypassing in-app-protections in iOS☆16Apr 6, 2025Updated last year
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆13Sep 8, 2026Updated last week
- List of Mine Private wordlist i use for fuzzing☆97Jun 17, 2026Updated 3 months ago
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 6 months ago
- Search for github leaks by combining gitleaks and git-hound capabilities with rate control and exhaustive search.☆25Jun 20, 2026Updated 2 months ago
- Password list collected from Cisco devices☆20Mar 25, 2019Updated 7 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- ☆21Apr 27, 2026Updated 4 months ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- A Burp extension to help pentesters copy requests / responses for reports.☆54Jul 8, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- Powerful LLM Query Framework with YAML Prompt Templates. Made for Automation☆36Sep 20, 2025Updated 11 months ago
- SafeCrypt is an academic ransomware simulation suite developed for Red Team engagements. It demonstrates modern malware techniques includ…☆38Oct 3, 2025Updated 11 months ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆24Jul 13, 2025Updated last year
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 5 months ago
- A comprehensive and hands-on workbook designed to sharpen your Active Directory penetration testing skills. Whether you're a red teamer, …☆20Feb 11, 2026Updated 7 months ago
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real orig…☆186Feb 22, 2026Updated 6 months ago