webProeasy

Лысина админа (Admin's Bald Head)

duckerz

Task: Bypass server protection to become admin. Solution: Crack JWT HS256 secret key using hashcat with rockyou.txt wordlist, then forge admin token to access the flag endpoint.

brute_force jwt hashcat token_forgery authentication

jwt_crackingjwt_forgerywordlist_attack

$ ls tags/ techniques/

brute_force jwt hashcat token_forgery authentication

jwt_crackingjwt_forgerywordlist_attack

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub, Discord, or Google to continue. No email required.

$sign in

$ grep --similar

Similar writeups

[web][Pro]Bug Bounty-code— hackerlab
[web][Pro]Печеньки с молочком (Cookies with Milk)— duckerz
[web][Pro]Разминка с JWT (JWT Warmup)— hackerlab
[web][Pro]Привилегированный гость (Privileged Guest)— hackerlab
[web][Pro]Скрытая документация (Hidden Documentation)— duckerz