update

Author: hahwul

cmd/decode.go

@@ -3,12 +3,14 @@ package cmd
 import (
 	"fmt"
 	"os"
+	"encoding/json"
 
 	"github.com/dgrijalva/jwt-go"
 	jwtInterface "github.com/hahwul/jwt-hack/pkg/jwt"
 
 	//. "github.com/logrusorgru/aurora"
 	"github.com/spf13/cobra"
+	"github.com/sirupsen/logrus"
 )
 
 // decodeCmd represents the decode command
@@ -18,17 +20,20 @@ var decodeCmd = &cobra.Command{
 	Run: func(cmd *cobra.Command, args []string) {
 		if len(args) >= 1 {
 			var token *jwt.Token
+			var log = logrus.New()
+			log.Out = os.Stdout
 			token = jwtInterface.JWTdecode(args[0])
-			fmt.Fprintln(os.Stderr, "[ Raw data ]")
-			fmt.Println(token.Raw)
-			fmt.Fprintln(os.Stderr, "[ Method ]")
-			fmt.Println(token.Method)
-			fmt.Fprintln(os.Stderr, "[ Headers ]")
-			fmt.Println(token.Header)
-			fmt.Fprintln(os.Stderr, "[ Claims ]")
-			fmt.Println(token.Claims)
+			header,_ := json.Marshal(token.Header)
+			log.WithFields(logrus.Fields{
+				"method": token.Method,
+				"header": string(header),
+			}).Info("Decoded data(claims)")
+			data,_ := json.Marshal(token.Claims)
+			fmt.Println(string(data))
 		} else {
-
+			var log = logrus.New()
+			log.Out = os.Stdout
+			log.Error("Arguments Error")
 		}
 	},
 }

cmd/encode.go

@@ -6,6 +6,7 @@ import (
 
 	jwtInterface "github.com/hahwul/jwt-hack/pkg/jwt"
 	"github.com/spf13/cobra"
+	log "github.com/sirupsen/logrus"
 )
 
 var secret, algo string
@@ -20,11 +21,15 @@ var encodeCmd = &cobra.Command{
 			var raw map[string]interface{}
 			if err := json.Unmarshal(mapInterface, &raw); err != nil {
 				// err
+				log.Error("JSON Unmarshal Error")
+				panic(0)
 			}
+			log.WithFields(log.Fields{
+				"algorithm": algo,
+			}).Info("Encoded result")
 			fmt.Println(jwtInterface.JWTencode(raw, secret, algo))
-
 		} else {
-
+			log.Error("Arguments Error")
 		}
 	},
 }

pkg/crack/crack.go

@@ -2,14 +2,17 @@ package crack
 
 import (
 	"fmt"
-	"strconv"
 	"sync"
+	"os"
 
 	jwtInterface "github.com/hahwul/jwt-hack/pkg/jwt"
-	. "github.com/logrusorgru/aurora"
+	"github.com/sirupsen/logrus"
 )
 
+var log = logrus.New()
+
 func Crack(mode, token, data string, concurrency, max int, power bool) {
+	log.Out = os.Stdout
 	fmt.Println("[*] Start " + mode + " cracking mode")
 	if mode == "brute" {
 		bf := GenerateBruteforcePayloads(data)
@@ -24,7 +27,9 @@ func Crack(mode, token, data string, concurrency, max int, power bool) {
 
 		// Remove Deplicated value
 		words = unique(words)
-		fmt.Println("[*] Loaded " + strconv.Itoa(len(words)) + " words (remove duplicated)")
+		log.WithFields(logrus.Fields{
+			"size":   len(words),
+		}).Info("Loaded words (remove duplicated)")
 		RunTestingJWT(token, words, concurrency)
 	}
 }
@@ -46,11 +51,17 @@ func RunTestingJWT(token string, lists []string, concurrency int) {
 					result, token := jwtInterface.JWTdecodeWithVerify(token, word)
 					_ = token
 					if result {
-						fmt.Println(Sprintf(Green("[+] Signature Verified / Found! This JWT Token signature secret is %s"), Cyan(word)))
+						log.WithFields(logrus.Fields{
+							"Signature":   "Verified",
+							"Word":   word,
+						}).Info("Found! This JWT Token signature secret is.. ")
+						fmt.Println(word)
 						found <- true
 
 					} else {
-						fmt.Println("[-] Signature Invaild / " + word)
+						log.WithFields(logrus.Fields{
+							"word":   word,
+						}).Info("Invalid signature")
 					}
 				}
 			}

pkg/payload/payload.go

@@ -3,13 +3,18 @@ package paylaod
 import (
 	b64 "encoding/base64"
 	"fmt"
+	"os"
 	"strings"
 
 	"github.com/dgrijalva/jwt-go"
+	"github.com/sirupsen/logrus"
 )
 
+var log = logrus.New()
+
 // GenerateAllPayloads is printing all payloads
 func GenerateAllPayloads(token *jwt.Token) {
+	log.Out = os.Stdout
 	GenerateNonePayloads(token.Raw)
 	GenerateUrlPayloads(token.Raw)
 }
@@ -28,7 +33,11 @@ func GenerateNonePayloads(token string) {
 		_ = k
 		header := "{\"alg\":\"" + v + "\",\"typ\":\"JWT\"}"
 		baseHeader := b64.StdEncoding.EncodeToString([]byte(header))
-		fmt.Println("[" + v + "] " + baseHeader + "." + claims + ".")
+		log.WithFields(logrus.Fields{
+			"payload": v,
+			"header":   header,
+		}).Info("Generate "+v+" payload")
+		fmt.Println(baseHeader + "." + claims + ".")
 	}
 
 }
@@ -46,7 +55,11 @@ func GenerateUrlPayloads(token string) {
 		_ = k
 		header := "{\"alg\":\"hs256\",\"" + v + "\":\"https://www.google.com\",\"typ\":\"JWT\"}"
 		baseHeader := b64.StdEncoding.EncodeToString([]byte(header))
-		fmt.Println("[" + v + "] " + baseHeader + "." + claims + ".")
+		log.WithFields(logrus.Fields{
+			"payload": v,
+			"header":   header,
+		}).Info("Generate "+v+" payload")
+		fmt.Println(baseHeader + "." + claims + ".")
 	}
 
 }

pkg/printing/version.go

@@ -1,3 +1,3 @@
 package printing
 
-const VERSION = "v0.0.1"
+const VERSION = "v1.0.0"

samples/jwt.txt

@@ -0,0 +1 @@
+eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.5mhBHqs5_DTLdINd9p5m7ZJ6XD0Xc55kIaCRY5r6HRA

samples/wordlist.txt

@@ -0,0 +1,19 @@
+1234
+ds
+fas
+df
+asdf
+asd
+ga
+2q
+efq
+f
+qsf
+sad
+f
+test
+zx
+dfas
+df
+asdf
+sadf