Hacking-JWT

This code is for testing the following techniques on a JWT to bypass authentication and authorization:

• Testing none technique
• Testing HMAC instead of RSA
• Testing for Exploiting KID

Screenshots

Installation

git clone https://github.com/keramatAlijani/Hacking-JWT.git

Recommended Python Version:

Hacking-JWT currently supports Python 2 .

• The recommended version for Python 2 is 2.7.x

Dependencies:

Hacking-JWT depends on the blessings and pyfiglet python modules.

These dependencies can be installed using the requirements file:

• Installation on Windows:

c:\python27\python.exe -m pip install -r requirements.txt

• Installation on Linux

sudo pip install -r requirements.txt

License

Hacking-JWT is licensed under the GNU GPL license. take a look at the LICENSE for more information.

Thanks

Special Thanks to the Pentesterlab website for its great exercises that helped me in improving the tool.

Version

Current version is 1.0