CVE-2016-10555

This repository contains a Go-based tool for testing and exploiting various JWT vulnerabilities, including CVE-2020-28042 (empty signature attack). It supports multiple attack modes such as modifying the algorithm to 'none', signature validation bypass, and key injection.

This PoC demonstrates CVE-2016-10555 by exploiting a JWT algorithm confusion vulnerability, where the attacker changes the algorithm from RS256 to HS256, causing the backend to use the public key as a symmetric secret for signature verification. The provided Python script generates a malicious JWT token signed with the public key, bypassing authentication.

This PoC demonstrates an authentication bypass vulnerability (CVE-2016-10555) in JWT token verification by exploiting algorithm confusion. The attacker can forge a token using HS256 with the public key, which the server incorrectly verifies as RS256.