Skip to content

Support Advanced JWE Attack Features #85

@hahwul

Description

@hahwul

Description:
jwt-hack supports JWE encode/decode but lacks advanced attack capabilities for JWE, such as encrypted key brute-forcing or padding oracle attacks. As JWE usage grows, adding these features would make the tool more robust.

Proposed Solution:

  • Add a JWE-specific crack mode for brute-forcing encrypted keys.
  • Implement padding oracle attack detection for vulnerable JWE implementations.
  • Enhance decode to flag potential JWE misconfigurations.

Use Case:
Security researchers testing modern APIs with JWE would benefit from targeted attack modules.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions