HackTheBox : WayWitch Writeup
Summary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to
Jul 17, 20264 min read3
