JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.
☆55Mar 19, 2026Updated 4 months ago
Alternatives and similar repositories for JWTLens
Users that are interested in JWTLens are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A full-stack web application that aggregates all HackerOne bug bounty programs that have source code repositories (GitHub, GitLab, Bitbuc…☆17Mar 16, 2026Updated 4 months ago
- A natural evolution of a evolution of Burp Suite's Repeater tool☆15Jun 29, 2026Updated 3 weeks ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated last month
- This is a PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆18Jul 21, 2025Updated last year
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆21Mar 10, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆24Apr 17, 2026Updated 3 months ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆16Mar 24, 2026Updated 3 months ago
- A powerful command-line tool for Google dorking, enabling users to uncover hidden information and vulnerabilities with advanced search qu…☆37Mar 4, 2026Updated 4 months ago
- Modern Bypass 403☆30Apr 28, 2026Updated 2 months ago
- Advanced Command and Control Framework for Authorized Red Team Operations☆57Mar 1, 2026Updated 4 months ago
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- ☆18Oct 4, 2020Updated 5 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆58Nov 6, 2025Updated 8 months ago
- Search for github leaks by combining gitleaks and git-hound capabilities with rate control and exhaustive search.☆24Jun 20, 2026Updated last month
- ☆20Apr 27, 2026Updated 2 months ago
- CVE 2025 27237 Zabbix LPE proof of concept.☆20Jan 26, 2026Updated 5 months ago
- List of Mine Private wordlist i use for fuzzing☆96Jun 17, 2026Updated last month
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Powerful LLM Query Framework with YAML Prompt Templates. Made for Automation☆36Sep 20, 2025Updated 10 months ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- Repository containing sample apps and Frida scripts for bypassing in-app-protections in iOS☆16Apr 6, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 本项目是一个自动化0day漏洞监控系统，通过GitHub Actions定时抓取互联网最新漏洞情报，自动翻译并生成结构化报告。系统每天UTC时间9:00自动运行，也可手动触发。☆30Updated this week
- Reflected XSS Payload List for Vue.js (2 & 3)☆15Jan 12, 2023Updated 3 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆13Feb 11, 2025Updated last year
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 4 months ago
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated 10 months ago
- 🔐🚀 Professional Burp Suite extension for 5G Core security testing 📡 | Automated NF discovery 🔍 | IMSI enumeration 📱 | Credential ext…☆21Dec 1, 2025Updated 7 months ago
- Static-Code-Analysis-Helper helps you perform static code analysis.☆33Feb 20, 2026Updated 5 months ago
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real orig…☆184Feb 22, 2026Updated 4 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆158Jan 22, 2026Updated 5 months ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆18Mar 12, 2026Updated 4 months ago
- Password list collected from Cisco devices☆20Mar 25, 2019Updated 7 years ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 7 months ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- ExecEvasion is a lightweight execution-evasion toolkit that generates command variants designed to bypass naive filters and WAF rules by …☆55Jan 31, 2026Updated 5 months ago
- An S3 account ID enumeration and bucket discovery tool☆21Mar 15, 2026Updated 4 months ago