bbhunter Goto Github PK

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.

jspanda

client-side prototype pullution vulnerability scanner

jsparser

jspathextractor

Jsdir is an Burp Suite extension that extract hidden paths from js files and beatify it for futher reading.

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

jsshell

An interactive multi-user web JS shell

jsubfinder

jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).

jsvars

Get variable names from javascript source.

junk

junk payloads

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

jwt-cracker

Simple HS256 JWT token brute force cracker

jwt-hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

jwt-hacking-challenges

APIs to practise diverse techniques to hack JWT Signatures

jwt-heartbreaker

The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources

jwt-lab

Lab for learning JWT.

jwt-pwn

Security Testing Scripts for JWT

jwt-reauth

jwt-secrets

jwt_secrets

A list of "secrets" from JWT sample code and readme files.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

jwtbrute

Brute forcing jwt tokens signed with HS256 since 2014

jwtcat

A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.

jwtdemo

Practice hacking JWT tokens

jwtear

Module command-line tool to parse, create and manipulate JWT tokens for hackers

jwtweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

jwtxploiter

A tool to test security of json web token

k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

k8s-ctf-rocks

Kubernetes Easter CTF

k8s-nuclei-templates

Nuclei templates for K8S security scanning

kaboom

automatic pentest