{"action":"created","issue":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2318","repository_url":"https://api.github.com/repos/magnumripper/JohnTheRipper","labels_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2318/labels{/name}","comments_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2318/comments","events_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2318/events","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2318","id":187383464,"number":2318,"title":"JWT Issue","user":{"login":"MagicAlan","id":23263704,"avatar_url":"https://avatars.githubusercontent.com/u/23263704?v=3","gravatar_id":"","url":"https://api.github.com/users/MagicAlan","html_url":"https://github.com/MagicAlan","followers_url":"https://api.github.com/users/MagicAlan/followers","following_url":"https://api.github.com/users/MagicAlan/following{/other_user}","gists_url":"https://api.github.com/users/MagicAlan/gists{/gist_id}","starred_url":"https://api.github.com/users/MagicAlan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MagicAlan/subscriptions","organizations_url":"https://api.github.com/users/MagicAlan/orgs","repos_url":"https://api.github.com/users/MagicAlan/repos","events_url":"https://api.github.com/users/MagicAlan/events{/privacy}","received_events_url":"https://api.github.com/users/MagicAlan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-04T16:47:31Z","updated_at":"2016-11-04T18:49:06Z","closed_at":null,"body":"I have the following JWT (it is an example):\r\n\r\neyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczovL3Rlc3QtdGVzdC50ZXN0ZXN0dGVzdC5jb20vIiwic3ViIjoidGVzdHwwMDAwMCIsImF1ZCI6ImZzZHJmTEtISkdZVGRmb3NpdXVUVUppdWZ5ZGd1cmZlIiwiZXhwIjoyNTQ0Nzc4NDU3LCJpYXQiOjI1NDQ3Nzg0NTcsImF6cCI6ImZzZHJmTEtISkdZVGRmb3NpdXVUVUppdWZ5ZGd1cmZlIn0.JLsq4NDG-SBY998TnuukyssQahWDqc-X5rXTifoMS8I\r\n\r\nI tried to crack it using John the Ripper (Jumbo) but I got the following error:\r\n\r\nUsing default input encoding: UTF-8\r\nNo password hashes loaded (see FAQ)\r\n\r\nSpecifying \"--format=HMAC-SHA256\" I'm still getting the same error above.\r\n \r\nIf I try the example JWT token in the jwt.io site, I can successfully crack it. So, my guess would be that John is not loading the value because of its size?\r\n\r\nCan anybody help me with this issue? thanks a lot!"},"comment":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/comments/258517021","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2318#issuecomment-258517021","issue_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2318","id":258517021,"user":{"login":"claudioandre","id":1702923,"avatar_url":"https://avatars.githubusercontent.com/u/1702923?v=3","gravatar_id":"","url":"https://api.github.com/users/claudioandre","html_url":"https://github.com/claudioandre","followers_url":"https://api.github.com/users/claudioandre/followers","following_url":"https://api.github.com/users/claudioandre/following{/other_user}","gists_url":"https://api.github.com/users/claudioandre/gists{/gist_id}","starred_url":"https://api.github.com/users/claudioandre/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/claudioandre/subscriptions","organizations_url":"https://api.github.com/users/claudioandre/orgs","repos_url":"https://api.github.com/users/claudioandre/repos","events_url":"https://api.github.com/users/claudioandre/events{/privacy}","received_events_url":"https://api.github.com/users/claudioandre/received_events","type":"User","site_admin":false},"created_at":"2016-11-04T18:49:06Z","updated_at":"2016-11-04T18:49:06Z","body":"> John is not loading the value because of its size?\r\n\r\nIndeed, the check failing is in valid() line 240 of hmacSHA256_fmt_plug.c\r\n```\r\nif (strlen(ciphertext) > CT_LEN)\r\n```"}}
{"actor":{"display_login":"claudioandre"}}