This JSON Web Token Security Cheat Sheet[1] or this python script[2] are both qu... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pentestercrab on Nov 1, 2018 | parent | context | favorite | on: Stop using JWT for sessions (2016)

This JSON Web Token Security Cheat Sheet[1] or this python script[2] are both quite useful when reviewing anything using of JWTs.

[1] https://assets.pentesterlab.com/jwt_security_cheatsheet/jwt_...

[2] https://github.com/ticarpi/jwt_tool

todd3834 on Nov 1, 2018 [–]

Those are great! I find the OWASP cheat sheet[1] useful as well but I’m going to keep the pentesterlab cheetsheet bookmarked for easier to digest to similar data. Thanks for sharing!

[1] https://www.owasp.org/index.php/JSON_Web_Token_(JWT)_Cheat_S...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact