JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.
jwt owasp cybersecurity bug-bounty vulnerability web-security vulnerability-scanners security-scanner burpsuite security-tools burp-extensions jwt-decode jwt-security token-security jwtlens
-
Updated
Mar 19, 2026 - Java