[addtool] JOSEPH

[gwen001]

[link]https://github.com/PortSwigger/json-web-token-attacker[/link] [tags]burpsuite,jwt,passwords[/tags] [short_descr]JavaScript Object Signing and Encryption Pentesting Helper.[/short_descr] [long_descr]Features:

• Recognition and marking
• JWS/JWE editors
• (Semi-)Automated attacks
  • Bleichenbacher MMA
  • Key Confusion (aka Algorithm Substitution)
  • Signature Exclusion
• Base64url en-/decoder
• Easy extensibility of new attacks[/long_descr] [image]https://raw.githubusercontent.com/gwen001/offsectools_www/main/096c812f429dccc4dd36b3f57a25949b.png[/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted by the team: https://offsec.tools/tool/joseph

Thank you for your contribution!