JWT Attack - Secret Brute force with Hashcat

Описание

Validates the JWT header and returns secret if the header is valid. Use Hashcat for brute force and get secret to verify JWT token signature part. Lab: https://brokencrystals.com
wordlist: https://github.com/wallarm/jwt-secrets/blob/master/jwt.secrets.list
Hashcat command: hashcat -a 0 -m 16500 JWT-Token-Here WordlistHere