A comprehensive JWT vulnerability assessment tool supporting 5 attack vectors for authorized security testing.
⚠️ WARNING: Only use against systems you own or have explicit written permission to test.
| Attack Vector | Description | CVE Reference |
|---|---|---|
alg: none Bypass |
Tests for CVE-2015-2951 by setting algorithm to "none" and removing signature | CVE-2015-2951 |
| Algorithm Confusion | RS256 → HS256 attack using RSA public key as HMAC secret | CVE-2016-10555 |
| Weak Secret Brute-force | Multi-threaded dictionary attack against HMAC-secured tokens | - |
kid Path Traversal |
Rewrites kid header to read local files (e.g., /dev/null, /etc/passwd) |
CVE-2018-0114 |
jku JWKS Spoofing |
Redirects to malicious JWKS endpoint for key injection | - |
git clone https://github.com/devkumaoni/jwt-fuzz.git
cd jwt-fuzz
pip install pyjwt requests colorama cryptography