jwt-heartbreaker Logo

jwt-heartbreaker

0
Free
Visit Website

The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources. This extension is designed to help security researchers and penetration testers identify potential vulnerabilities in JWT-based applications. It allows you to scan for JWT tokens in HTTP requests and responses, and then analyze them for potential weaknesses. This can help you identify potential vulnerabilities, such as the use of weak keys or predictable salts. This extension is a powerful tool for identifying potential security issues in JWT-based applications. It is a must-have tool for any security researcher or penetration tester working with JWT-based applications.

FEATURES

ALTERNATIVES

One stop shop for decompiling Android apps with a focus on regenerating R references.

A strings statistics calculator for YARA rules to aid malware research.

A collection of Android Fakebank and Tizi samples for analyzing spyware on Android devices.

A tutorial on setting up a virtual ARM environment, reversing ARM binaries, and writing basic exploits for ARM using the trafman challenge of rwthCTF as an example.

Powerful debugging tool with extensive features and extensions for memory dump analysis and crash dump analysis.

A blog post discussing INF-SCT fetch and execute techniques for bypass, evasion, and persistence

Kaitai Struct is a declarative language for describing binary data structures.

Java decompiler GUI tool for Procyon under Apache License.