Skip to content

Releases: ozzi-/JWT4B

2.8.2

Choose a tag to compare

@ozzi- ozzi- released this 11 Jun 06:51

Bug fix: Removing unneeded stack trace for headers that aren't valid b64
https://github.com/ozzi-/JWT4B/issues/99

2.8.1

Choose a tag to compare

@ozzi- ozzi- released this 04 Apr 10:18

This release contains fixes addressing the bugs introduced with 2.8 - sorry about that.

  • 'JSON Web Tokens' Suite Tab fixed
  • Cleanup log output

2.8

2.8

Choose a tag to compare

@ozzi- ozzi- released this 24 Mar 13:49
1812f68
  • Feature: support for custom authorization types (i.e. headers such as: X-ABC eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ind3dy5iZWpzb24uY29tIiwic3ViIjoiZGVtbyJ9.BAklbCVA0KK3OQRc1YNofALqSKoBHrIKLdPjQoX9lqc)

  • Feature: auto detect jwt secret
    image

Thanks to https://github.com/xiaoshi-friday for providing the two PRs!

2.7

2.7

Choose a tag to compare

@ozzi- ozzi- released this 12 Aug 12:49
  • Feature: Consider request header values with a JWT such as "Token: ey.ey.ey"
  • Fix: Height of about window

2.6

2.6

Choose a tag to compare

@ozzi- ozzi- released this 23 Jul 08:10

fix: cookie parse bug introduced in 2.5
improve: make extension aware of burp font

2.5

2.5

Choose a tag to compare

@ozzi- ozzi- released this 14 Jun 12:22
eb3442d
  • improve: Using Burp Montaya API

  • improve: header detection now checks all headers that start with "Bearer"

  • fix: jwts in cookies that contain a = (valid b64) now parsed correctly

  • fix: prevent resign key field to break on small window sizes

  • cleaning up about tab

2.4

2.4

Choose a tag to compare

@ozzi- ozzi- released this 08 Jan 14:31

Fixed: Cookie data HTML not rendered within Intercept tab
HTML rendering has been disabled within Burp extensions and needs to be re-enabled on a per-component basis.

Thanks https://github.com/DolphFlynn for the PR

2.3

2.3

Choose a tag to compare

@ozzi- ozzi- released this 31 Aug 06:33
0ffb36d

Fixed: Displaying HTML formatted text properly again with new Burp versions
Fixed: Changed JSON library to prevent erroneous encoding when pretty printing JWT contents
Feature: Support for o365 JWT attack
Feature: Support for keys in hexadecimal form
Misc: Refactoring

2.2

2.2

Choose a tag to compare

@ozzi- ozzi- released this 11 Feb 14:29
  • Support for BURPs dark theme
  • Bugfixes & Refactoring
  • Updating old libraries

Big thanks to @DolphFlynn

image

Bugfix

Choose a tag to compare

@ozzi- ozzi- released this 07 Jan 07:12
6d02b00

Added by @DolphFlynn
Fixed NPE when key null and using JWT tokens with RS256 or ES256 algorithms