Flask Unsign

screenshot of Flask Unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Overview:

Flask Unsign is a command-line tool designed for fetching, decoding, brute-forcing, and crafting session cookies of a Flask application by guessing secret keys. It provides a way to analyze and manipulate session data for testing and development purposes.

Features:

  • Session Cookie Decoding: Easily decode Flask session cookies that are signed, not encrypted.
  • Brute Force Secret Keys: Attempt to brute-force the server's secret key to access session data.
  • Craft Custom Session Data: Utilize the tool to sign and manipulate your own custom session data.

Summary:

Flask Unsign is a powerful tool for working with Flask application session cookies, offering features like decoding, brute-forcing secret keys, and crafting custom session data. With easy installation via pip and detailed instructions on troubleshooting, it provides a convenient solution for developers looking to manipulate session data for testing and analysis purposes.