ticarpi/jwt_tool repository overview

⁠jwt_tool

'jwt_tool' written by @ticarpi
Original source: https://github.com/ticarpi/jwt_tool⁠

Further documentation and methodologies can be found on the wiki:
https://github.com/ticarpi/jwt_tool/wiki/Using-jwt_tool⁠
https://github.com/ticarpi/jwt_tool/wiki/Attack-Methodology⁠

---

⁠Usage

Download this tool:
docker pull ticarpi/jwt_tool
Base command for running jwt_tool:
docker run -it --network "host" --rm -v "${PWD}:/tmp" -v "${HOME}/.jwt_tool:/root/.jwt_tool" ticarpi/jwt_tool

It is recommended that you alias the base command e.g.:
alias jwt_tool='docker run -it --network "host" --rm -v "${PWD}:/tmp" -v "${HOME}/.jwt_tool:/root/.jwt_tool" ticarpi/jwt_tool'

---

⁠Config files

Config and log files are stored on the host OS here:
{HOME}/.jwt_tool
e.g.

• /home/ticarpi/.jwt_tool/jwtconf.ini (Linux)
• C:\User\ticarpi\.jwt_tool\jwtconf.ini (Windows)

---

⁠File mapping

The base command above maps the current working directory to /tmp/ in the docker image.
To use a local file you should reference it in the tmp directory. e.g.
docker run -it --network "host" --rm -v "${PWD}:/tmp" -v "${HOME}/.jwt_tool:/root/.jwt_tool" ticarpi/jwt_tool eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJsb2dpbiI6InRpY2FycGkifQ.bsSwqj2c2uI9n7-ajmi3ixVGhPUiY7jO9SUn9dm15Po -C -d /tmp/example.txt

---

⁠Proxying

To proxy tool traffic through Burp Suite (or another tool) on a localhost port when Windows is the host OS, change the proxy address in jwtconf.ini to:
host.docker.internal:8080