Ramachandran Thamarai Semmenianandchan770 3b8a8d3d09 Do not crash on a JWT with a non-base64url signature (fixes #6101) (#6102) ...

JWT_REGEX accepts a signature segment of any length and parseJWT only
validates the header/payload, so a value that matches the JWT pattern but
carries a malformed/truncated signature (e.g. 41 base64url characters,
which is length % 4 == 1 and thus impossible base64) reached crackHMAC.
There decodeBase64(signature) let binascii.Error propagate, aborting the
whole run with an unhandled exception during checkJWT().

Guard the signature decode: a signature that is not valid base64url cannot
be an HMAC we could verify, so crackHMAC now treats it as not crackable
(returns None) instead of raising. The other auditJWT findings are
unaffected. Added a regression doctest.

Co-authored-by: chan770 <[email protected]>

2026-09-01 10:24:58 +02:00

..

controller

Update related to the #6099

2026-08-28 09:44:22 +02:00

core

Update related to the #6099

2026-08-28 09:44:22 +02:00

parse

Minor patch for multiple-dbms tags

2026-08-23 17:35:54 +02:00

request

Adding gadget fallback for non-query statement execution without stacked queries (PostgreSQL dblink)

2026-08-18 11:35:54 +02:00

takeover

Implementing PostgreSQL PL-extension RCE

2026-07-12 18:38:09 +02:00

techniques

Couple of fixes

2026-08-17 22:20:42 +02:00

utils

Do not crash on a JWT with a non-base64url signature (fixes #6101) (#6102)

2026-09-01 10:24:58 +02:00

__init__.py

Year bump

2026-01-01 19:12:07 +01:00