webProeasy
Лысина админа (Admin's Bald Head)
duckerz
Task: Bypass server protection to become admin. Solution: Crack JWT HS256 secret key using hashcat with rockyou.txt wordlist, then forge admin token to access the flag endpoint.
$ ls tags/ techniques/
jwt_crackingjwt_forgerywordlist_attack
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Bug Bounty-code— hackerlab
- [web][Pro]Печеньки с молочком (Cookies with Milk)— duckerz
- [web][Pro]Разминка с JWT (JWT Warmup)— hackerlab
- [web][Pro]Привилегированный гость (Privileged Guest)— hackerlab
- [web][Pro]Скрытая документация (Hidden Documentation)— duckerz