THIS RUBY SCRIPT CONVERTS YOUR JWT RS256 ALGORITHM TO HS256 ALGORITHM WHICH IS USED FOR ALGORITHM CONFUSION ATTACK.
Repository from Github https://github.comaseemyash/LetsConfuseTheAlgo
THIS RUBY SCRIPT CONVERTS YOUR JWT RS256 TOKEN ALGORITHM TO HS256 ALGORITHM WHICH IS USED FOR ALGORITHM CONFUSION ATTACK
Requirements: PUBLIC PEM KEY
USER NEED TO SAVE PUBLIC KEY AS public.pem IN A SAME FOLDER AND JUST NEED TO REPLACE THE JWT TOKEN IN CODE AS A ADMIN OR ANY TARGET USERNAME
THIS RUBY SCRIPT CONVERTS YOUR JWT RS256 ALGORITHM TO HS256 ALGORITHM WHICH IS USED FOR ALGORITHM CONFUSION ATTACK.