Sjord/jwtdemo

Stars
107
Rank 323,587 (Top 7 %)
Language
PHP
Created about 8 years ago
Updated about 2 years ago

Sjord/jwtdemo

Sjord

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Practice hacking JWT tokens

Vulnerable JWT implementations

Article: Attacking JWT authentication.

Demo pages:

HS256
RS256

Attacks:

Change the algorithm from HS256 to none.
Change the algorithm from RS256 to HS256, and use the public key as the secret key for the HMAC.
Crack the HMAC key using John the Ripper.

jwtcrack

Crack the shared secret of a HS256-signed JWT

checkmate

Checkmate MP3 Checker is a free program that checks MP3 files for errors.

messpostage

PostMessage extension

growatt_api_client

This Python script logs in to server.growatt.com and retrieves data on solar panels.

tablefilter

Chrome extension to filter tables

crack-ezchatter-token

Crack php rand() state

encoded-js-trojan

dnscurve-python

Implementation of DNSCurve in python

CsvReader

Fork of Sebastien Lorion's Fast CSV Reader

calculator

PHP script which parses a simple mathematical expression and calculates the result.

protravel

Recursively exploit path traversal vulnerability

autobaud

get-rich-slowly

Automatisch beleggen in beleggingsfondsen

Sjord.github.io

tree-sitter-bicep

cartesianwords

Combine two wordlists and output every combination of a word from the first list followed by a word from the second list

sprengel

Download an exposed .hg directory

qicheng

A New Class of Unsafe Primes

vulnbingo

Generate vulnerability bingo cards

ignore-regex-in-diff

IntelliJ plugin that hides changes that contain certain regular expressions in the diff viewer

infosecbot

matasano

My solutions to the matasano crypto challenges

githubsearch

CheckPasswordDictionary

cartopars

Carto CSS parser

crack-kayako-token

londahl-close-factoring

Finding close-prime factorizations

vmclip

Read/write the clipboard of the host OS from a guest OS running on VMWare

tutanospam

Client-side spam filter for Tutanota

ScoutsOffline

ScoutsOnline, alleen dan offline

SyncBrowsing

Chrome extension to navigate in two tabs at once

CompareSecureStrings

https://www.sjoerdlangkemper.nl/2017/11/08/comparing-securestrings-in-dotnet/

ExclusiveTimer

Timer to keep track of how much time you spent on each proejct

funcgrep

csv2ical

Script that converts from a CSV file to an iCalendar file, to import birthdays into Google Calendar

ignore-foo-in-diff

IntelliJ plugin that hides changes that contain the word "foo" in the diff viewer