webeasy

rigidType

hackerlab

Task: Flask app with JWT authentication, source code provided. Solution: JWT None Algorithm Attack - the jwt.decode() allows 'none' algorithm and has verify_signature=False, enabling token forgery with admin privileges.

$ ls tags/ techniques/
signature_bypassflaskjwtauthentication_bypasspythonsource_code_analysisnone_algorithm
JWT None Algorithm AttackJWT Signature Verification BypassToken Forgery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]