jwt

1 post

TryHeartMe

An improperly protected JWT lets a normal shopper forge an admin role and redeem the staff-only flag.

May 22, 2026 TryHackMe
TryHeartMe artwork