arrow-left

All pages
gitbookPowered by GitBook
1 of 2

Loading...

Loading...

Web

Broken Tokens

/pubkey.pem gives us the public key for JWT

Don't even need to read the source lol

Log in as guest to get jwt token, use jwt_tool to resign with pubkey

Set auth to admin

Get flag

hashtag
Flag: flag{1n53cur3_tok3n5_5474212}