Process

  1. Create a file jwt.txt with the jwt file contents
john jwt.txt --wordlist=/usr/share/wordlists/jwtsecrets.txt --format=HMAC-SHA256  
hashcat -m 16500 -a 0 jwt.txt /usr/share/wordlists/rockyou.txt