jwt-attacks

What problem does it solve?

This Skill helps penetration testers identify and exploit vulnerabilities in JSON Web Tokens (JWTs) used for authentication and authorization, enabling privilege escalation or unauthorized access.

Core Features & Use Cases

• JWT Vulnerability Exploitation: Detects and exploits common JWT flaws like algorithm confusion, weak secrets, and header injection.
• Token Forgery & Tampering: Allows for the creation of malicious JWTs to impersonate users or gain elevated privileges.
• Use Case: A penetration tester suspects an application's JWT implementation is flawed. They use this Skill to test for alg:none vulnerabilities, attempt to crack a weak secret, or exploit kid injection to forge an administrator token.

Quick Start

Use the jwt-attacks skill to decode the provided JWT token and identify potential vulnerabilities.