JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.
☆55Mar 19, 2026Updated 7 months ago
Alternatives and similar repositories for JWTLens
Users that are interested in JWTLens are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A full-stack web application that aggregates all HackerOne bug bounty programs that have source code repositories (GitHub, GitLab, Bitbuc…☆18Mar 16, 2026Updated 7 months ago
- ☆11Jun 9, 2023Updated 3 years ago
- A curated collection of MCP servers useful for bug bounty hunting☆14May 12, 2025Updated last year
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 5 months ago
- ☆24Apr 17, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This is a PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆18Jul 21, 2025Updated last year
- ☆18Oct 4, 2020Updated 6 years ago
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆17Mar 24, 2026Updated 7 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- Search-driven OSINT and reconnaissance toolkit for web and GitHub discovery.☆41Sep 17, 2026Updated last month
- ☆27Mar 12, 2026Updated 7 months ago
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆23Oct 8, 2026Updated 3 weeks ago
- A highly efficient and powerful Go script designed to detect sensitive data leaks in JavaScript files.☆22Dec 9, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- tool to extract LSA credentials using a vulnerable microsoft signed windows defender driver in a stealthy manner☆18Apr 12, 2026Updated 6 months ago
- Red portatil de reconocimiento inteligente con IA offline☆16Jun 9, 2026Updated 4 months ago
- Modern Bypass 403☆31Apr 28, 2026Updated 6 months ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆43Sep 22, 2026Updated last month
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆129Updated this week
- Improve automated and semi-automated active scanning in Burp Pro☆12Jun 13, 2025Updated last year
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆28Jun 4, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Advanced Command and Control Framework for Authorized Red Team Operations☆58Mar 1, 2026Updated 7 months ago
- List of Mine Private wordlist i use for fuzzing☆99Jun 17, 2026Updated 4 months ago
- Mine URLs from Browser's Heap Snapshot for fun and profit☆68Aug 9, 2023Updated 3 years ago
- The Web Bot Auth implementation for Anubis.☆12Sep 28, 2026Updated last month
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real orig…☆196Feb 22, 2026Updated 8 months ago
- FetchDiff is a tool to monitor remote JavaScript and web pages for changes.☆25Sep 27, 2026Updated last month
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆65Nov 6, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 2 months ago
- CVE 2025 27237 Zabbix LPE proof of concept.☆20Jan 26, 2026Updated 9 months ago
- Repository containing sample apps and Frida scripts for bypassing in-app-protections in iOS☆16Apr 6, 2025Updated last year
- Golang tool which helps dropping the irrelevant entries from your ffuf result file.☆144Sep 16, 2024Updated 2 years ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains or a single doma…☆53Dec 9, 2024Updated last year
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago