JOSEPH

JavaScript Object Signing and Encryption Pentesting Helper.

#burpsuite #jwt #passwords

https://github.com/PortSwigger/json-web-token-attacker

Features:
- Recognition and marking
- JWS/JWE editors
- (Semi-)Automated attacks
* Bleichenbacher MMA
* Key Confusion (aka Algorithm Substitution)
* Signature Exclusion
- Base64url en-/decoder
- Easy extensibility of new attacks