$ cat writeup.md…
$ cat writeup.md…
cryptohack
Task: JWT auth where jwt.decode accepts both HS256 and RS256 using the same RSA public key, which is exposed publicly. Solution: algorithm confusion (CVE-2016-5431) — forge an HS256 token using the PEM public key bytes (with trailing newline) as the HMAC secret to set admin:true.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar