Professional Community

JWT Monitor

This extension monitors a provided JWT token for expiration and automatically replaces any existing JWT tokens in outgoing requests with the monitored one. It also includes an autopilot mode that intelligently pauses task execution when the JWT token is about to expire and resumes automatically when a new token with sufficient validity is provided.

Features

  • Monitors JWT token expiration with real-time countdown display
  • Automatically replaces existing JWT tokens in Authorization headers and cookies
  • Autopilot mode that pauses task execution when token expires within one minute
  • Automatic task resumption when new JWT token with at least three minutes validity is supplied
  • Visual expiration warnings with color-coded status indicators
  • Displays decoded JWT header, payload, and signature in formatted JSON
  • Comprehensive logging of token replacements and task control actions

Usage

  1. Navigate to the JWT Monitor tab in the extension interface
  2. Paste your JWT token into the token input field
  3. Click the Apply button to start monitoring the token
  4. The extension will display the token's expiration countdown and decoded components
  5. All outgoing requests will automatically have their JWT tokens replaced with your monitored token
  6. To enable autopilot mode, click the Autopilot toggle button
  7. When autopilot is enabled, task execution will pause when the token has less than one minute remaining and resume automatically when a new token with at least three minutes validity is provided
  8. Monitor the log area for real-time updates on token replacements and task control actions

The extension supports JWT tokens in both Authorization headers (Bearer format) and cookies, automatically detecting and replacing tokens that begin with eyJ.

Author

Author

Redguard

Version

Version

1.1.1

Rating

Rating

Popularity

Popularity

Last updated

Last updated

11 September 2025

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.