TokenSniper
A small command-line tool for poking at JWTs: decode them, brute-force secrets and run the classic token attacks, with optional AI hints.
Overview#
TokenSniper is a focused command-line utility for working with JSON Web Tokens: decode, analyse and attack, with optional AI-assisted suggestions.
What I built#
- Token type detection (JWT, UUID, HEX) and JWT decoding.
- JWT secret brute-forcing (multithreaded), the "none" algorithm trick, and algorithm swapping.
- Optional AI suggestions (Groq + LLaMA) on a token's structure, security and likely attack vectors.