94 matches found
CVE-2021-44910_SpringBlade
CVE-2021-44910-Herramienta de detección de vulnerabilidades SpringBlade Vulnerabilidad de autenticación JWT de SpringBlade. Uso python3 Se utilizaron respectivamente los algoritmos "HS256", "HS384", "HS512" para las pruebas...
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time:- The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop.- The verification key is...
PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
SummaryA service that verifies HS256 tokens using an empty oct JWK through PyJWK, including a PyJWK obtained from PyJWKSet, can therefore accept attacker-generated tokens as authenticated.PyJWT 2.13.0 rejects an empty HMAC key when it is supplied through the raw str/bytes key path, but accepts th...
jwt_tool
The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...
jwt-key-id-injector
Inyector de ID de Clave JWT Script simple de Python para verificar una vulnerabilidad hipotética de JWT. Supongamos que hay una aplicación que utiliza tokens JWT firmados con el algoritmo HS256. Un token de ejemplo se ve así:...
jwt-key-id-injector
JWT Key ID Injector Simple python script to check against hypothetical JWT vulnerability. Let's say there is an application that uses JWT tokens signed HS256 algorithm. An example token looks like the follow:...
jwt-key-confusion-poc
JWT Key Confusion PoC CVE-2015-9235 Written for the Hack the Box challenges - Under Construction and Secret Both included scripts perform a Java Web Token Key Confusion Attack CVE-2015-9235. To perform the attack it is required that the attacker know the public key which the server will use to...
RS256-2-HS256
RS256-2-HS256 Ataque JWT para cambiar el algoritmo RS256 a HS256 Uso usage: RS2562HS256JWT.py -h payload pubkey positional arguments: payload Carga útil JSON del JWT a atacar pubkey Archivo de clave pública para usar en la firma optional arguments: -h, --help mostrar este mensaje de ayuda y salir...
kit-jwt
kit-jwt Codificación y decodificación de JSON Web Token JWT para Kit TOC Archivos Archivo| Descripción ---|--- .editorconfig| Configuración de formato del editor .gitignore| Reglas de ignorado de Git para artefactos de compilación y dependencias .tool-versions| Versiones de herramientas asdf Zig,...
GHSA-9J54-FG26-WV3R PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
Summary A service that verifies HS256 tokens using an empty oct JWK through PyJWK, including a PyJWK obtained from PyJWKSet, can therefore accept attacker-generated tokens as authenticated. PyJWT 2.13.0 rejects an empty HMAC key when it is supplied through the raw str/bytes key path, but accepts...
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time: - The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop. - The verification key ...
GHSA-W2CX-738M-MC7W PyJWT accepts public JWK containers as HMAC secrets
Summary PyJWT 2.13.0 contains an incomplete defense against algorithm confusion when an application mixes symmetric and asymmetric algorithms in one verification path. A public RSA, EC, or OKP JWK can be accepted as an HMAC secret when it is wrapped in a JWKS object, nested in an array, or...
CVE-2026-89026
CVE-2026-89026 --- Issabel PBXAPI Exploit & Scanner About CVE-2026-89026 is the security issue targeted by this project. This repository contains a PoC exploit and scanner for researching and validating the affected Issabel PBXAPI authentication behavior. The project is designed for authorized...
poc-cve-2016-10555
Cambiar el algoritmo RS256 asimétrico a HS256 simétrico - POC CVE-2016-10555 El algoritmo HS256 utiliza la clave secreta para firmar y verificar cada mensaje. El algoritmo RS256 utiliza la clave privada para firmar el mensaje y la clave pública para la autenticación. Si cambias el algoritmo de...
POC_CVE-2015-9235
CVE-2015-9235 Demostración del ataque de confusión de algoritmo en librerías de Json Web Token JWT. Los JWT se usan a menudo en cookies para certificar una sesión de usuario, por lo que este ataque es crítico. El módulo de Node [email protected] se utilizó para demostrar la vulnerabilidad...
Exploit for Improper Verification of Cryptographic Signature in Wso2 Api_Control_Plane
abraxaslabs.tech · github.com/abraxas ·&...
CVE-2026-75431_PowerJob_jwt_key_predictable
Clave de Firma JWT de PowerJob Predecible Clave Derivada de la URL JDBC Predeterminada → Falsificación de Tokens 1. Resumen La clave de firma JWT HS256 del servidor PowerJob se deriva decodificando en BASE64 una constante codificada concatenada con el MD5 de la URL JDBC predeterminada...
CVE-2026-82329-poc
CVE-2026-82329 Artifactory Security Assessment Tool PoC dan alat validasi untuk mengidentifikasi instalasi JFrog Artifactory self-hosted yang terdampak CVE-2026-82329. Alat ini memvalidasi rantai autentikasi berikut: 1. Membuat join JWT HS256 menggunakan signing key default yang kosong. 2. Mengir...
CVE-2026-89026
CVE-2026-89026 Issabel pbxapi JWT hardcodeado RCE POC Issabel Framework pbxapi — falsificación de JWT no autenticada clave HS256 hardcodeada y luego GET /pbxapi/manager/originate con Application=System para ejecutar comandos del sistema operativo como el usuario de Asterisk. Parcheado en el commi...