Jwtxploiter

Latest version: v1.2.1

Safety actively analyzes 681866 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

1.2.1

FIXED
* FileNotFoundError when passing non existing key file to -k/--key 10
ADDED
* Quiet option to suppress warnings and colored output, keeping only the crafted token
ENANCHEMENT
* Added methods to spped up format conversions (der, pem, int)
* Algorithm now is not required anymore for verifying operations

1.2

FIXED
* AttirubuteError if jwks file does not contain the verifier key 8
* JWKS file not properly generated 7
* Installation script may miss to install requirements 2 closed by Auror007
IMPLEMENTED
+ CVE 2020-28042 null signature
ENANCHEMENT
* Dropped off pyOpenSSL dependency
* Dropped usage of subprocess to internal python methods
* Improved --auto-try efficency
* Certificates generation now use cryptography library

1.1

FIXED
* x5u functions was not converting public numbers to base64
* generating jwk was not converting public numbers to base64
IMPLEMENTED
+ Added feature for dump generated key
+ Merged --complex-payload functionality in --payload (--complex-payload is always avaiable but is deprecated)
+ Added feature to verify a token against a JWKS file
ENANCHEMENT
* Wiki updated
* Docstrings corrections

-- Andrea Tedeschi <andrea.tedeschiandreatedeschi.uno> Sun, 07 Feb 2021 08:39:41 +0000

1.0

+ Initial release

-- Andrea Tedeschi <andrea.tedeschiandreatedeschi.uno> Tue, 02 Feb 2021 13:35:49 +0000

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.