[addtool] JOSEPH

[gwen001]

[tags]json,burpsuite[/tags] [short_descr]JavaScript Object Signing and Encryption Pentesting Helper.[/short_descr] [link] https://github.com/PortSwigger/json-web-token-attacker [/link] [long_descr] Features:

• Recognition and marking
• JWS/JWE editors
• (Semi-)Automated attacks
  • Bleichenbacher MMA
  • Key Confusion (aka Algorithm Substitution)
• Signature Exclusion
• Base64url en-/decoder
• Easy extensibility of new attacks [/long_descr] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/0a1efee581017e1104c5cd52099a3d34.png [/image]

[gwen001]

Duplicate of https://github.com/gwen001/offsectools_www/issues/447