gl4nce

Reading system log with socat does not work (anymore?)

4

As described here: https://github.com/OWASP/owasp-mstg/blob/master/Document/0x06b-Basic-Security-Testing.md There you find the following command: `iPhone:~ root# socat - UNIX-CONNECT:/var/run/lockdown/syslog.sock` I tried it on my iPhone (iOS 14.2) but I get always the following error...

Allow multiple JWT tokens on different locations

3

Would be a nice feature, if JWTs in multiple locations can appear with an option to select one for testing. I'm currently testing an website which is sending two JWTs...

Supporting GET method

7

I know this is really bad practise, but currently I'm pentesting an API which is sending the JWT as a simple get parameter. JWT_Tool does not support this case. Maybe...

Tested with two .nessus file exports. The "merged" file is always the content of one of the two files.

Adding ARM64 arch definition according to https://learn.microsoft.com/en-us/dotnet/api/system.reflection.portableexecutable.machine?view=net-8.0

STUN binding request with username attribute

6

Would it be possible to send the `username` attribute in STUN binding requests? Obviously some STUN servers expect this attribute on binding requests. Does this make sense? I'm not such...