Crack the shared secret of a HS256-signed JWT
Crack a HS256, HS384 or HS512-signed JWT. You need
PyJWTfor these scripts:
pip install PyJWT
crackjwt.py JWT dictionary.txt
Try to verify the signature on the JWT using all words in
dictionary.txt(one per line).
Convert a JWT to a format John the Ripper can understand.
John the Ripper now supports the JWT format, so converting the token is no longer necessary. John has a size limit on the data it will take. If you run into this limit, consider changingin the source code.