← All tools

JWT_Tool

https://github.com/ticarpi/jwt_tool

Open Source

Categories

Web Application

Description

Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities including algorithm confusion (alg:none, RS256 to HS256), weak secrets, and injection attacks.

Keywords

JWT JSON Web Token algorithm confusion signature bypass token tampering authentication

Example Usage

python3 jwt_tool.py eyJhbG...token...
python3 jwt_tool.py -t https://example.com/api -rh "Authorization: Bearer TOKEN" -M at
python3 jwt_tool.py TOKEN -X a