daffainfo
/
ctf-writeup
mirror of https://github.com/daffainfo/ctf-writeup.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

feat: update readme

main
daffainfo 2024-10-28 18:26:23 +07:00
parent 6e87cbe0bb
commit 03f96dd911
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
2024/Cyber Jawara CTF International 2024/Java Box/README.md
View File

@ -270,8 +270,6 @@ public class JwtUtil {
So we found the signing key for JWT: `c31bcd4ffcff8e971a6ad6ddcbdc613a1246f4223c00fa37404b501ad749257c`. All we needed was to set `isAdmin` flag to true. But, when we tried the key on https://jwt.io the token didnt work. One teammate tried a different site, which is https://token.dev, and it finally worked (we still don’t know why jwt.io failed to sign the token lol). So we found the signing key for JWT: `c31bcd4ffcff8e971a6ad6ddcbdc613a1246f4223c00fa37404b501ad749257c`. All we needed was to set `isAdmin` flag to true. But, when we tried the key on https://jwt.io the token didnt work. One teammate tried a different site, which is https://token.dev, and it finally worked (we still don’t know why jwt.io failed to sign the token lol).
![alt text](images/help-2.png)
## Flag ## Flag
CJ{black_box_web_testing_is_not_that_bad_and_too_guessy_right?} CJ{black_box_web_testing_is_not_that_bad_and_too_guessy_right?}