jwt-heartbreaker
The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources. This extension is designed to help security researchers and penetration testers identify potential vulnerabilities in JWT-based applications. It allows you to scan for JWT tokens in HTTP requests and responses, and then analyze them for potential weaknesses. This can help you identify potential vulnerabilities, such as the use of weak keys or predictable salts. This extension is a powerful tool for identifying potential security issues in JWT-based applications. It is a must-have tool for any security researcher or penetration tester working with JWT-based applications.
FEATURES
ALTERNATIVES
A Python script that finds endpoints in JavaScript files to identify potential security vulnerabilities.
Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.
A cutting-edge AI-based IT security platform that identifies malware and cyber-attacks within seconds
A toolkit for detecting and tracking Blind XSS, XXE, and SSRF vulnerabilities
A blog post discussing INF-SCT fetch and execute techniques for bypass, evasion, and persistence
Assembler/disassembler for the dex format used by Dalvik, Android's Java VM implementation.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.