jwt-key-id-injector
Simple python script to check against hypothetical JWT vulnerability. This script injects a custom key ID into a JWT token, allowing you to test if a server is vulnerable to the hypothetical JWT vulnerability. This script is not intended to be used in production, but rather as a proof-of-concept to demonstrate the vulnerability.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A tool that extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
Code to prevent a managed .NET debugger/profiler from working.
Joe Sandbox Community provides automated cloud-based malware analysis across multiple OS platforms.
PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.
A collaborative malware analysis framework with various features for automated analysis tasks.
Valkyrie is a sophisticated file verdict system that enhances malware detection through behavioral analysis and extensive file feature examination.
A program to manage yara ruleset in a database with support for different databases and configuration options.
A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.