jwt-security

A tool to test security of json web token

OWASP PTK - application security browser extension.

Node JS , Typescript , Express based reactive microservice starter project for REST and GraphQL APIs

⚡ Automated web security reconnaissance & vulnerability assessment tool for bug bounty hunters. Discover attack surfaces, fingerprint technologies, detect common web vulnerabilities, and generate actionable security reports.

JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.

Spring boot with JWT security and refresh token.

A lightweight offensive security recon framework for modern bug bounty workflows.

Attacker-minded, 100% client-side JWT toolkit — decode, audit & forge tokens. Generates alg:none, key-confusion, kid-injection & brute-force attacks with ready-to-run curl/Burp/nuclei exports. The security alternative to jwt.io.

Implementing JWT security based using Spring boot

A command-line toolkit for inspecting, verifying, cracking, and securing JSON Web Tokens. built to expose how JWT signing works and where it breaks.

A lightweight Rust CLI for authorized JWT security testing and lab use.

A comprehensive Food Delivery System built with Spring Boot providing RESTful APIs for managing restaurants, menu items, orders, and users. Features JWT authentication, role-based authorization, order tracking, and complete restaurant management capabilities.

🔭 JWTelescope is an advanced CLI tool for decoding, inspecting, and performing security analysis on JSON Web Tokens (JWTs). It is designed for bug bounty hunters, pentesters, and developers who want fast insight into JWT structure, claims, and common misconfigurations.

TELGUARD-X v4.0 is an advanced mobile network penetration testing framework for GTP host discovery, 5G core analysis, API security testing, container detection, JWT/OAuth2 testing, threat intelligence integration, and comprehensive vulnerability assessment with interactive HTML reports.

A browser-based JWT security toolkit that decodes, audits, brute-forces weak secrets, forges tampered tokens, and simulates real-world attacks — with instant Python/PyJWT fix code generation.

This project demonstrates production-ready JWT security with Spring Security 6, role-based access control, token revocation, and comprehensive API documentation. Includes H2 database, password encryption, and protected endpoints with full logout functionality.

A professional, modular, and secure CLI-based tool for analyzing, verifying, and testing JSON Web Tokens (JWTs).

JWT Analyzer is a C# CLI tool that reads, scans, and edits JSON Web Tokens for security analysis. It helps identify common JWT misconfigurations, decode claims, and modify tokens for testing purposes. Designed as an early-stage project for educational and authorized security testing.

A high-scale, task management ecosystem built with Spring Boot 4.0.2 and Java 25. Features a trustless JWT security model, cross-service orchestration via OpenFeign, and high availability through Resilience4j and Eureka service discover

A .NET CLI tool that performs static analysis on C# source code to detect insecure or misconfigured JWT authentication patterns.