jwt-tool-skill
CommunityStreamline JWT assessment with jwt_tool
Authorxijunww
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill assists with authorized JWT assessment and manipulation using ticarpi/jwt_tool, providing quick access to decoding, verification, and exploitation commands.
Core Features & Use Cases
- JWT Decoding and Verification: Quick access to decode, verify signatures, and crack HMAC secrets.
- Exploitation Commands: Test 'alg:none', key confusion, JWKS spoofing, and inline JWK attacks.
- Interactive Tampering: Manual token editing for in-depth testing.
- Playbook Scanning: Automated scans of live endpoints for common JWT vulnerabilities.
- Use Case: For a security auditor examining a web application that uses JWT tokens for authentication, this Skill can be used to verify token integrity, crack secrets, and test for vulnerabilities in real-time.
Quick Start
Use the jwt-tool-skill to decode a JWT token: python3 jwt_tool.py '<JWT>'
Dependency Matrix
Required Modules
pythonjwt_tool
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: jwt-tool-skill Download link: https://github.com/xijunww/Pentest/archive/main.zip#jwt-tool-skill Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.