Article: Attacking JWT authentication.
Demo pages:
Attacks:
- Change the algorithm from HS256 to none.
- Change the algorithm from RS256 to HS256, and use the public key as the secret key for the HMAC.
- Crack the HMAC key using John the Ripper.
e
attacking_jwt_php
public
0 stars
0 forks
0 issues
Commits
List of commits on branch master.Unverified
def84cb65062006a436060a2dad6e2079e0915d5changing this from a fork to my own repo
committed 4 years ago