jwt-bf : Json Web Token (JWT) brute force

jwt brute force cracker via node js. supports dictionary attacks against HS256.

Usage:
    jwt-bf <token> <wordlist>
    token       the full HS256 jwt token to crack
    wordlist    wordlist dictionary file

Install

npm install --global jwt-bf

jwt-bf <token> <wordlist>

jwt-bf /path/to/token.txt /path/to/wordlist.txt

SECRET FOUND: 1234
Time taken (sec): 0.006
Attempts: 4

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
.gitignore		.gitignore
README.md		README.md
index.js		index.js
package-lock.json		package-lock.json
package.json		package.json
password.txt		password.txt
token.txt		token.txt