🔍 JsonExploit

A simple Python tool designed to find interesting and potentially sensitive keys in JSON data.

⭐️ If you find this tool useful, please leave a star and share your feedback! ⭐️

---

JsonExploit recursively scans through JSON files or input strings to locate keys commonly associated with vulnerabilities or sensitive information (e.g., id, token, password, jwt, secret, api_key).

Features

• Recursively inspects nested JSON dictionaries and lists.
• Pre-configured list of interesting keys.
• Beautiful, colorized output using the rich library.
• Accepts both direct JSON strings and file paths as input.

Requirements

• Python 3.x
• rich library

Installation

1. Clone the repository:

   git clone https://github.com/Venu-exe/JsonExploit.git
   cd JsonExploit

2. Install the required dependencies:

   pip install -r requirements.txt

Usage

Run the tool using Python:

python3 JsonExploit.py

You will be prompted to enter a JSON string or the path to a JSON file. The tool will parse the data and display a table of any interesting keys found.

Example Run

Given a file test.json:

{
  "name": "test_user",
  "email": "test@example.com",
  "config": {
    "api_key": "12345-ABCDE-67890",
    "debug": true
  },
  "endpoints": [
    {
      "url": "https://api.example.com/v1",
      "token": "secret_token_value"
    }
  ]
}

Running the tool provides the following output:

JsonExploit - A tool to find interesting keys in JSON data
Author: Venu-exe
GitHub: https://github.com/Venu-exe/JsonExploit
Enter JSON data (or path to JSON file): test.json

Total keys found: 8
              Interesting Keys Found               
┏━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Key                ┃ value                      ┃
┡━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ email              │ test@example.com           │
│ config.api_key     │ 12345-ABCDE-67890          │
│ endpoints[0].url   │ https://api.example.com/v1 │
│ endpoints[0].token │ secret_token_value         │
└────────────────────┴────────────────────────────┘

Author

Venu-exe

License

MIT License