jwt-hack
jwt-hack copied to clipboard
hahwul
🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)
In payloads.go, when you encode the JWT after tampering with it, you encode with `b64.StdEncoding.EncodeToString()`. However, you should use `base64.RawURLEncoding.EncodeToString()`. The second method strips the padding from the base64 (i.e....
JSON Unmarshal Error 
기능 - [ ] Show JWT info => e.g convert expire time - [x] Signature secret Bruteforce - [x] Signature secret Dictionary attack - [x] None algorithm testing - [...
- For some reason the tool kills the process after some time processing rockyou.txt, since it's 14m+ password there, but when I tried a 10m+ list it worked fine without...
 When running in brute mode for a period of time, this error will appear.
Added logic to use the max flag, since the max flag was not used in bruteforce.
similar issue https://github.com/hahwul/dalfox/issues/134
- Signature Algorithm - Encryption Algorithm - Key Management Algorithm ref: https://github.com/jwtk/jjwt