cerberauth / vulnapi Goto Github PK

For now, the test is done with HS256 but server could check only the alg but not the rest. The idea would be to create a new token with the same alg but with a random secret.

This report should contain at least:

• Vulnerability Tested with status
• Unexpected response
• Scan Duration
• Potential Vulnerability with a link to vuln explainations

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

Use one list for scanning known URLs: https://github.com/danielmiessler/SecLists/tree/master

Web Extension API is an HTTP API accepting HTTP requests with JWT. The API must take the request initially targeting the service with should received the token. With this request, the project should copy the request and scan with those informations.

When OpenAPI contains a OpenID Connect authorization, use this authentication method instead on JWT. Open a browser in order to let the user authorize himself.