Merge pull request #9 from DontPanicO/develop

Merge develop for release 1.3
DontPanicO · Feb 18, 2021 · c9a2031 · c9a2031
2 parents b3b003a + 651a7bc
commit c9a2031
Show file tree

Hide file tree

Showing 4 changed files with 141 additions and 166 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,3 +1,16 @@
+jwtxploiter v1.2
+
+  FIXED
+  * AttirubuteError if jwks file does not contain the verifier key #8
+  * JWKS file not properly generated #7
+  IMPLEMENTED
+  + CVE 2020-28042 null signature
+  ENANCHEMENT
+  * Dropped off pyOpenSSL dependency
+  * Dropped usage of subprocess to internal python methods
+  * Improved --auto-try efficency
+  * Certificates generation now use cryptography library
+
 jwtxploiter v1.1
 
   FIXED

diff --git a/README.md b/README.md
@@ -1,4 +1,4 @@
-[![Python 3.7|3.9](https://img.shields.io/badge/python-3.7|3.9-blue.svg)](https://www.python.org/) [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-red.svg)](https://www.gnu.org/licenses/gpl-3.0) [![release 1.1](https://img.shields.io/badge/release-1.1-yellow.svg)](https://github.com/DontPanicO/jwtXploiter/releases/tag/v1.1) [![pypi 1.1](https://img.shields.io/badge/pypi-1.1-purple.svg)](https://pypi.org/project/jwtxploiter/)
+[![Python 3.7|3.9](https://img.shields.io/badge/python-3.7|3.9-blue.svg)](https://www.python.org/) [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-red.svg)](https://www.gnu.org/licenses/gpl-3.0) [![release 1.2](https://img.shields.io/badge/release-1.2-yellow.svg)](https://github.com/DontPanicO/jwtXploiter/releases/tag/v1.2) [![pypi 1.2](https://img.shields.io/badge/pypi-1.2-purple.svg)](https://pypi.org/project/jwtxploiter/)
 
 ### jwtXploiter
 A tool to test security of JSON Web Tokens.
@@ -21,8 +21,8 @@ N.B. Deb package has to be considered beta
 
 + With rpm:
   ```console
-  wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter-1.1-1.noarch.rpm
-  sudo rpm --install jwtxploiter-1.1-1.noarch.rpm
+  wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter-1.2-1.noarch.rpm
+  sudo rpm --install jwtxploiter-1.2-1.noarch.rpm
   ```
 
 + With pip:
@@ -32,8 +32,8 @@ N.B. Deb package has to be considered beta
 
 + With deb:
   ```console
-  wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter_1.1-1_all.deb
-  sudo dpkg -i jwtxploiter_1.1-1_all.deb
+  wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter_1.2-1_all.deb
+  sudo dpkg -i jwtxploiter_1.2-1_all.deb
   ```
 
 + Cloing the repo: