webeasy

OpenSecret

hackthebox

Task: Gain access to a protected section of a website. Solution: Found hardcoded JWT secret in frontend JavaScript, forged admin token to access restricted /tickets endpoint.

$ ls tags/ techniques/
jwtinformation_disclosurehardcoded_secret
source_code_analysisjwt_forgery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]