Security ToolPersonal Project
JWT Security Analyzer
A full-stack toolkit that pulls a penetration tester's scattered JWT-attack workflow into a single real-time interface — decode, brute-force, and exploit, all in one place.
- Role
- Creator
- Type
- personal work
The challenge
JWT security testing was spread across disconnected scripts and tools, slowing testers down and making real-time feedback impossible. The whole workflow needed to live behind one interface.
What I owned
- Built token decode/verify plus wordlist and GPU brute-force via Hashcat integration.
- Shipped None-Algorithm and KID-injection attack modules with live payload editing.
- Streamed real-time output to a React frontend so testers see results as attacks run.
Next project
Otonomiq Console Portal