offensive-jwt
JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.
Why this score
This repo hosts 10 skills, so its 7,620 stars are split between them (about 762 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit a8de813edc9f, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneoffensive-jwt SnailSploit/Claude-Red · Skill | 79 | ★ 7.6k | ≈116 always | 23d ago |
| attack-jwt CyberStrikeus/CyberStrike · Skill Both about jwt and attack | 71 | ★ 3.2k | ≈25 always | 21d ago |
| api-auth-and-jwt-abuse yaklang/hack-skills · Skill Both about jwt and auth | 69 | ★ 2.5k | ≈46 always | 2mo ago |
| sast-jwt utkusen/sast-skills · Skill Both about jwt and token | 53 | ★ 1.3k | ≈21 always | 7mo ago |