Detect symmetric vs asymmetric JWTs and brute-force HMAC secrets in-browser.
Select a wordlist size before starting.
Paste a JWT to begin.
Symmetric HS256/384/512 tokens can be brute-forced in the browser.