JWT Attack - Weak Key - Secret Brute force with Hashcat
Validates the JWT header and return secret if the header is valid. The token validation is done using algorithm in header and key that is configured in JWT_SECRET_KEY env variable
Lab: https://brokencrystals.com
wordlist: https://github.com/wallarm/jwt-secret...
Hashcat command: hashcat -a 0 -m 16500 JWT-Token-Here WordlistHere