f515d2fbc9
A beginner CLI under PROJECTS/beginner that decodes JSON Web Tokens and audits them for common mistakes: the alg none downgrade, weak HMAC secrets, the RS256 to HS256 confusion attack, missing or long expirations, and secrets carried in the payload. Standard library signatures (no PyJWT), Typer plus Rich CLI, 60 tests, ruff and mypy clean, pylint 10/10, formatted with the repository YAPF config, and a full learn/ folder following the template. Demo tokens are generated at runtime so no credentials appear in the source. |
||
|---|---|---|
| .. | ||
| base64-tool | ||
| c2-beacon | ||
| caesar-cipher | ||
| canary-token-generator | ||
| dns-lookup | ||
| firewall-rule-engine | ||
| hash-cracker | ||
| jwt-auditor | ||
| keylogger | ||
| linux-cis-hardening-auditor | ||
| linux-ebpf-security-tracer | ||
| metadata-scrubber-tool | ||
| network-traffic-analyzer | ||
| simple-port-scanner | ||
| simple-vulnerability-scanner | ||
| systemd-persistence-scanner | ||