Merge pull request DontPanicO#9 from DontPanicO/develop

Merge develop for release 1.3
quantum-decrypt-security · Feb 18, 2021 · c9a2031 · c9a2031
2 parents b3b003a + 651a7bc
commit c9a2031
Show file tree

Hide file tree

Showing 4 changed files with 141 additions and 166 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,3 +1,16 @@
+jwtxploiter v1.2
+
+ FIXED
+ * AttirubuteError if jwks file does not contain the verifier key #8
+ * JWKS file not properly generated #7
+ IMPLEMENTED
+ + CVE 2020-28042 null signature
+ ENANCHEMENT
+ * Dropped off pyOpenSSL dependency
+ * Dropped usage of subprocess to internal python methods
+ * Improved --auto-try efficency
+ * Certificates generation now use cryptography library
+
 jwtxploiter v1.1
 
  FIXED

diff --git a/README.md b/README.md
@@ -1,4 +1,4 @@
-[![Python 3.7|3.9](https://img.shields.io/badge/python-3.7|3.9-blue.svg)](https://www.python.org/) [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-red.svg)](https://www.gnu.org/licenses/gpl-3.0) [![release 1.1](https://img.shields.io/badge/release-1.1-yellow.svg)](https://github.com/DontPanicO/jwtXploiter/releases/tag/v1.1) [![pypi 1.1](https://img.shields.io/badge/pypi-1.1-purple.svg)](https://pypi.org/project/jwtxploiter/)
+[![Python 3.7|3.9](https://img.shields.io/badge/python-3.7|3.9-blue.svg)](https://www.python.org/) [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-red.svg)](https://www.gnu.org/licenses/gpl-3.0) [![release 1.2](https://img.shields.io/badge/release-1.2-yellow.svg)](https://github.com/DontPanicO/jwtXploiter/releases/tag/v1.2) [![pypi 1.2](https://img.shields.io/badge/pypi-1.2-purple.svg)](https://pypi.org/project/jwtxploiter/)
 
 ### jwtXploiter
 A tool to test security of JSON Web Tokens.
@@ -21,8 +21,8 @@ N.B. Deb package has to be considered beta
 
 + With rpm:
  ```console
- wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter-1.1-1.noarch.rpm
- sudo rpm --install jwtxploiter-1.1-1.noarch.rpm
+ wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter-1.2-1.noarch.rpm
+ sudo rpm --install jwtxploiter-1.2-1.noarch.rpm
  ```
 
 + With pip:
@@ -32,8 +32,8 @@ N.B. Deb package has to be considered beta
 
 + With deb:
  ```console
- wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter_1.1-1_all.deb
- sudo dpkg -i jwtxploiter_1.1-1_all.deb
+ wget http://andreatedeschi.uno/jwtxploiter/jwtxploiter_1.2-1_all.deb
+ sudo dpkg -i jwtxploiter_1.2-1_all.deb
  ```
 
 + Cloing the repo: