$ cat writeup.md…
$ cat writeup.md…
hackerdna
Task: Flask app issues an HS256 JWT whose role claim gates an admin panel; the signing secret is weak. Solution: crack the HS256 secret with hashcat/John + rockyou, forge a role=admin token to unlock disclosed SSH creds, then escalate to root via a world-writable log file eval'd by a root loop.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar