Penetrating Networks

0 %
Navid Fazle Rabbi
Sr. Security Researcher
Offensive Security Research
bKash Ltd.
Research Interest
  • 🔒 Web & Mobile AppSec
  • 💥 Side-Channel Analysis
  • 🤖 AI Attacks & AI Security
  • 🔗 Blockchain & Web3 Security
  • 🌐 Browser Security
  • 💻 Source Code Analysis
  • 🔐 Real-world Cryptograpy
  • 💣 Exploit Development
  • 🔄 Reverse Engineering
  • 🌐 IoT Security

JWT-Hawk

A few months ago, an online retailer faced a security breach where the attacker compromised several user accounts. Upon investigation, the offensive security team found that the attacker was able to generate valid JWT tokens with weak signatures, which allowed them to access sensitive user data.

JWT-Hawk

JWT-Hawk is a Python tool used for decoding JWT tokens by trying multiple secrets from a provided list. This tool is useful for anyone who needs to decode JWT tokens but doesn't know the secret.

  • Language
    Python