Alternatives and similar repositories for jwt-hacking-challenges:

Users that are interested in jwt-hacking-challenges are comparing it to the libraries listed below

• david3107 / graphql-security-labs
  GraphQL security workshop labs
  ☆102Updated 7 months ago
• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆42Updated last year
• timhudson / jwt-secret
  Bruteforce a JWT against a list of passwords
  ☆72Updated 7 years ago
• amalmurali47 / onaws
  Fetch the details of assets hosted on AWS.
  ☆86Updated last year
• dwisiswant0 / slackcat
  A simple way of sending messages from the CLI output to your Slack with webhook.
  ☆116Updated last year
• rammarj / csrf-poc-creator
  A Burp Suite extension for CSRF proof of concepts.
  ☆49Updated last year
• bp0lr / dmut
  A tool to perform permutations, mutations and alteration of subdomains in golang.
  ☆157Updated last year
• MilindPurswani / whoxyrm
  A reverse whois tool based on Whoxy API.
  ☆162Updated 10 months ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆189Updated 6 months ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• hakluke / hakcron
  Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)
  ☆84Updated 3 years ago
• tismayil / fockcache
  FockCache - Minimalized Test Cache Poisoning
  ☆110Updated 5 years ago
• pwn0sec / PwnSSRF
  A Python based scanner to find potential SSRF parameters in a web application.
  ☆71Updated 3 years ago
• nikitastupin / param-miner-doc
  Unofficial documentation for the great tool Param Miner
  ☆176Updated 2 years ago
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆130Updated 4 years ago
• codingo / fastsub
  A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.
  ☆57Updated 2 years ago
• appsecco / dvja
  Damn Vulnerable Java (EE) Application
  ☆134Updated last year
• jdonsec / AllThingsXXE
  ☆25Updated 4 years ago
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆80Updated 2 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆120Updated 2 years ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆216Updated 2 years ago
• In3tinct / Taken
  Takeover AWS ips and have a working POC for Subdomain Takeover.
  ☆90Updated this week
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆66Updated 4 years ago
• kosmosec / proto-find
  Let's check if your target is vulnerable for client side prototype pollution.
  ☆64Updated last year
• kleiton0x00 / CRLF-one-liner
  A simple Bash one liner with aim to automate CRLF vulnerability scanning.
  ☆68Updated 4 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆71Updated 4 years ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆70Updated 3 years ago
• obheda12 / MoneyScope
  A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities
  ☆103Updated 4 years ago
• ShiftLeftSecurity / tarpit-java
  Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks
  ☆78Updated 2 years ago
• hahwul / RegexPassive
  🔭 Collection of regexp pattern for security passive scanning
  ☆115Updated 2 years ago