jwt-hack

Kit de herramientas para hackear JSON Web Tokens Un kit de herramientas de alto rendimiento para probar, analizar y atacar JSON Web Tokens. Instalación Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install...

Astra

Astra REST APIのペネトレーションテストは、既存のAPIの継続的な変更や新しく追加されるAPIのために複雑です。Astraは、セキュリティエンジニアや開発者がプロセスの一部として使用できるため、開発サイクルの初期段階で脆弱性を検出し修正できます。Astraはログイン・ログアウト（認証API）を自動的に検出しテストするため、誰でも簡単にCICDパイプラインに統合できます。AstraはAPIコレクションを入力として受け取ることができるため、スタンドアロンモードでのAPIテストにも使用できます。 SQLインジェクション クロスサイトスクリプティング 情報漏洩 認証とセッション管理の...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

PT-2025-11698 · Fast-Jwt · Fast-Jwt

Name of the Vulnerable Software and Affected Versions: fast-jwt versions prior to 5.0.6 Description: The fast-jwt library does not properly validate the iss claim based on the RFC 7519, allowing an array of strings as a valid iss value. This enables a potential attack where a malicious actor craf...

RS256-2-HS256 - JWT Attack To Change The Algorithm RS256 To HS256

JWT Attack to change the algorithm RS256 to HS256 Usage usage: RS2562HS256JWT.py -h payload pubkey positional arguments: payload JSON payload from JWT to attack pubkey Public key file to use for signing optional arguments: -h, --help show this help message and exit Example Download RS256-2-HS256...

Astra - Automated Security Testing For REST API's

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can automatically...

REST API Penetration Testing: Astra

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can automatically...