jwt-secrets wordlists
Weak HMAC secrets used to test alg confusion and HS256-with-public-key. Only against tokens you minted or a program that allows JWT tests.
Tags: jwt, secrets, hmac
Category: params · Size: small
Fetch
wget https://raw.githubusercontent.com/wallarm/jwt-secrets/master/jwt.secrets.list