jwt-hack
A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens
Essential Features
Discover jwt-hack's essential features for comprehensive attack surface detection and analysis.
encode & decode
JWT and JWE tokens with multiple algorithms, custom headers, and DEFLATE compression.
verify signatures
Symmetric and asymmetric algorithms verified with secrets or keys, plus expiration validation.
advanced cracking
Crack JWT secrets via dictionary or brute-force, with support for compressed tokens.
attack payloads
Generate none-alg, algorithm confusion, and header manipulation attack variants.
high performance
Built in Rust with parallel processing for intensive operations — raw speed under load.
mcp server
Integrate with AI models via Model Context Protocol for intelligent JWT analysis.
Contributing
JWT-HACK is an open-source project. If you want to contribute to this project, please see CONTRIBUTING.md and submit a pull request!
View Contributing Guide