
jwt_tool
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

Proof-of-concept denial-of-service tool that enforces Diffie-Hellman ephemeral key exchange over TLS and SSH to saturate server CPU, implementing…

Decodes and unsigns vulnerable session cookies from Django, Flask, Laravel, Express, and JWT frameworks. Supports HMAC-based decoders, base64…

🔐 A CLI tool to extract server certificates


🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…

SecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…

An open-source framework for verifiably private AI inference

SAML v2.0 bindings in Java using JAXB

Cryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.

POC for CVE-2026-4444 demonstrating JWT algorithm confusion via untrusted kid injection, including vulnerable Node.js server and Python exploit for…

Post-quantum hybrid encryption library combining X25519 + ML-KEM-768 with AES-256-GCM

Open-source services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, JAX-WS, and JAX-RS APIs.

Proof-of-concept denial-of-service tool that exploits the DHEat attack (CVE-2002-20001) by enforcing Diffie-Hellman key exchange against TLS and SSH…

Testing TLS/SSL encryption anywhere on any port

Curated list of awesome projects and resources related to Rust and computer security

Simple and flexible tool for managing secrets