Skip to content

JQ tips #

Disclaimer #

There is no need for this nonsense. Refer to this awesome person: Lzone jq cheatsheet

Installation #

sudo apt install jq

Filtering (Grepping) for specific key values, then selecting a specific key afterwards #

  • Example given: Bloohound collector’s json data. Finding hosts with Unconstrained Delegation. 
    1
    cat 20210401_computers.json|jq '.computers[] |select(.Properties.unconstraineddelegation ==true) | .Properties.name'

Printing 2 or more values #

  • Example: For priting the email and password/hashed_password from dehashed at the same time 
    1
2
    cat dehashed.txt|jq '.entries[] | {email,password}'
cat evilginx_sessions.json|jq -r 'keys[] as $k | "\(.[$k] | .name)=\(.[$k] | .value)"'
Last update: November 16, 2022