JWT Cracker is a Simple HS256 JWT token brute force cracker.
How to get this tool
To use this tool, please use a method listed below.
In a Linux (Debian OS), run the following command(s).
npm install --global jwt-cracker
Download directly from the following link:
How to execute
jwt-cracker <token> <alphabet> <maxLength>
- token: the full HS256 JWT token string to crack
- alphabet: the alphabet to use for the brute force (default: "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
- maxLength: the max length of the string generated during the brute force (default: 12)
- Apply for membership (free) at caribbeancspa.org > apply, if you have a photo ID from the Caribbean.
- View our list of Members at caribbeancspa.org > members.
This article was contributed by Jason Jacobs from Guyana. Jason is a member of the Caribbean CSPA.