myjwt

library2.1.0pypypi✓ verified 80d ago

MyJWT is a pentesting tool for JWT (JSON Web Tokens) allowing users to modify, crack, and check JWTs. Current version 2.1.0, release cadence irregular, last release 2024.

security

pip install myjwt

github ↗homepage ↗

INSTALL

IMPORT

SIG · MYJWT

myjwt

securitypythonv2.1.0

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

MyJWT

✓ import myjwt

✗ from myjwt import MyJWT

Decode a JWT token. For cracking, use .crack() with a wordlist file.

from myjwt import MyJWT import os jwt = MyJWT(token="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c") print(jwt.decode()) # For cracking you'd need a wordlist: jwt.crack('path/to/wordlist.txt', algorithm='HS256')

Debug

Known issues

breakingMyJWT 2.x dropped support for Python <3.10. Ensure your environment is 3.10+.

fix

Upgrade Python to 3.10 or later.

affects: >=2.0.0

gotchaThe .crack() method expects a file path to a wordlist, not a list of strings.

fix

Pass a valid file path (string) containing one password per line.

affects: all

deprecatedThe 'algorithm' parameter in .crack() may default to HS256, but specifying it explicitly is recommended for clarity.

fix

Always specify algorithm, e.g., .crack('wordlist.txt', algorithm='HS256').

affects: all

Upgrade

Version history

2.1.0latest on PyPI · released Jul 10, 2024

Audit

Dependencies

PyJWTrequiredFor JWT encoding/decoding

requestsrequiredFor HTTP requests

richrequiredFor CLI output formatting

Agent activity

10 hits · last 30 days

node

Resources

githubhttps://github.com/mBouamama/MyJWT ↗

homepagehttps://github.com/mBouamama/MyJWT ↗