hahwul / jwt-hack
π© jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)
β776Updated 8 months ago
Alternatives and similar repositories for jwt-hack:
Users that are interested in jwt-hack are comparing it to the libraries listed below
- A fast tool to scan CRLF vulnerability written in Goβ1,375Updated this week
- Tool to help exploit XXE vulnerabilitiesβ551Updated last year
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirectsβ954Updated 3 years ago
- ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )β685Updated last year
- Quick SQLMap Tamper Suggesterβ1,358Updated 2 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.β501Updated 2 years ago
- HTTP Request Smuggling Detection Toolβ482Updated last year
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hacβ¦β914Updated last month
- Fetches javascript file from a list of URLS or subdomains.β753Updated last year
- Automation for javascript recon in bug bounty.β910Updated last year
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters andβ¦β781Updated last year
- A fuzzer for detecting open redirect vulnerabilitiesβ725Updated 6 months ago
- declutters url lists for crawling/pentestingβ1,254Updated 2 weeks ago
- A tool to check a bunch of URLs that contain reflecting params.β557Updated 5 months ago
- Heuristic Vulnerable Parameter Scannerβ578Updated last year
- MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filteringβ¦β1,360Updated this week
- DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on itβ449Updated last year
- Because just a dark theme wasn't enough!β559Updated last month
- Go client to communicate with Chaos DB API.β670Updated last week
- A fast DOM based XSS vulnerability scanner with simplicity.β781Updated 2 years ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..eβ¦β957Updated 7 months ago
- Accept URLs on stdin, replace all query string values with a user-supplied valueβ786Updated 2 years ago
- Local file inclusion exploitation toolβ820Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,251Updated 4 months ago
- Web App bug huntingβ556Updated 7 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the acβ¦β1,697Updated 9 months ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)β572Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerabilityβ835Updated 3 years ago
- Automation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated filesβ¦β680Updated 6 months ago
- Electron JS Browser To Find XSS Vulnerabilities Automaticallyβ686Updated 3 years ago