Article: Attacking JWT authentication.
Demo pages:
Attacks:
- Change the algorithm from HS256 to none.
- Change the algorithm from RS256 to HS256, and use the public key as the secret key for the HMAC.
- Crack the HMAC key using John the Ripper.
-
Notifications
You must be signed in to change notification settings - Fork 28
Practice hacking JWT tokens
Sjord/jwtdemo
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Practice hacking JWT tokens
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published