#json-web-token

Articles tagged with #json-web-token

FAM CTF : The Vault Door Writeup
Summary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts
Jul 18, 20264 min read11
HackTheBox : WayWitch Writeup
Summary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to
Jul 17, 20264 min read3