BappDescription.html

<p>JWT Scanner is a Burp Suite extension for automated testing of JSON Web Token (JWT) implementations of web applications. </p>

<p>JWT Scanner performs the following checks:</p>
<ul>
    <li>Signature presence</li>
    <li>Invalid signatures</li>
    <li>Signatures with empty passwords</li>
    <li>Usage of algorithm none variations</li>
    <li>Invalid ECDSA parameters (CVE-2022-21449)</li>
    <li>JWT JWK injection</li>
</ul>