webmedium

Космический терминал (Cosmic Terminal)

duckerz

Task: GraphQL API with JWT authentication on abandoned spaceship terminal. Solution: Exploited enabled introspection to discover nested query path to JWT signing secret, forged token with captain privileges to access flag.

$ ls tags/ techniques/
jwtgraphqlauthorization_bypasstoken_forgeryintrospection
jwt_forgerygraphql_introspectionjwt_secret_extractionnested_query_exploitation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]