JWTScan

This is a template collection for the 403 Bypasser Caido plugin.

Installation

1. Install the plugin
2. Go to the template tab of the plugin and create a new template
3. name it and add a description
4. insert the content of the script you'd like to add
5. save it

JWTScan

• scans different none variations
• tries to modify the properties of the JWT body
• injects a webhook into properties known for causing SSRF

TODO

• add a template which signes JWTs with a custom key.

Credits

• https://github.com/bebiksior/Caido403Bypasser
• https://caido.io/