← All tools

JWT_Tool

https://github.com/ticarpi/jwt_tool

Open Source

Categories

Web Application

Description

Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities including algorithm confusion (alg:none, RS256 to HS256), weak secrets, and injection attacks.

Keywords

JWT JSON Web Token algorithm confusion signature bypass token tampering authentication

Example Usage

python3 jwt_tool.py eyJhbG...token...
python3 jwt_tool.py -t https://example.com/api -rh "Authorization: Bearer TOKEN" -M at
python3 jwt_tool.py TOKEN -X a

See also

public-skills-builder

Free

Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln c…

API-Pentesting-Tools

Open Source

API Pentesting Tools are specialized security tools used to test and analyze the security of Applica…

NoSQLMap

Open Source

Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…

xurlfind3r

Open Source

A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It w…

waf-bypass

Open Source

Check your WAF before an attacker does…

Interactsh

Open Source

Out-of-band interaction gathering server. Generates unique collaboration URLs for detecting blind vu…