Crack a HS256, HS384 or HS512-signed JWT. You need
PyJWT for these scripts:
pip install PyJWT
crackjwt.py JWT dictionary.txt
Try to verify the signature on the JWT using all words in
dictionary.txt (one per line).
Convert a JWT to a format John the Ripper can understand.
John the Ripper now supports the JWT format, so converting the token is no longer necessary. John has a size limit on the data it will take. If you run into this limit, consider changing
SALT_LIMBS in the source code.