Skip to content

Instantly share code, notes, and snippets.

@abhaybhargav

abhaybhargav/none_token.py

Created November 9, 2016 16:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save abhaybhargav/82262716c15c4fde00e227caa22b7bb7 to your computer and use it in GitHub Desktop.
Save abhaybhargav/82262716c15c4fde00e227caa22b7bb7 to your computer and use it in GitHub Desktop.
Download ZIP
"none" token flaw in JWT
Raw
none_token.py
token ='eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJpc3MiOiJodHRwczovL2p3dC1pZHAuZXhhbXBsZS5jb20iLCJzdWIiOiJtYWlsdG86bWlrZUBleGFtcGxlLmNvbSIsIm5iZiI6MTQ3ODcwOTYyOSwiZXhwIjoxNDc4NzEzMjI5LCJpYXQiOjE0Nzg3MDk2MjksImp0aSI6ImlkMTIzNDU2IiwidHlwIjoiaHR0cHM6Ly9leGFtcGxlLmNvbS9yZWdpc3RlciJ9.'
jwt_manage = jwt.decode(token, verify=False)
#Remember, certain libs might not be patched or require explicit verification params to be set
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment