CVEs-PoC/2015/CVE-2015-2951.md

CVE-2015-2951

Description

JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/The-Cracker-Technology/jwt_tool
• https://github.com/aress31/jwtcat
• https://github.com/crpytoscooby/resourses_web
• https://github.com/mishmashclone/ticarpi-jwt_tool
• https://github.com/puckiestyle/jwt_tool
• https://github.com/snakesec/jwt_tool
• https://github.com/techleadevelopers/Security-Stuffers-Lab
• https://github.com/techleadevelopers/red-team-ops
• https://github.com/ticarpi/jwt_tool
• https://github.com/z-bool/Venom-JWT
• https://github.com/zhangziyang301/jwt_tool