Web - Server

Hi, I’m getting struggled in this challenge, can u give me a hint. Is brute force necessary ?

No bruteforce on this challenge

hmm I know that there must be a trick here, however the associated docs dont help much. I think I have to find more, still, dont see a sign of exploit

hey man I got the flag. Don’t know if I should vote for like or dislike because the challenge is stupidly easy and it took me 1 week to find out.

Who can give me a hint for this challenge ? I dont understand how to trick the program and get the flag.

Help me please. I don’t know what doing. "msg" :"Bad Authorization header. Expected value ’Bearer ’"

for : "msg" :"Bad Authorization header. Expected value ’Bearer ’ .

you have to add a space after the ’Bearer’ it gives : ’Bearer ’ (sorry for my english ^^’)

I try all of the JWT attacks ,but it no work

Hi all,

Read the code and watch what kind of data you are manipulating, RFC 4648 may help, as told in a french thread of this forum.
Hope that helps

I confirm the "Base Jump" challenge helps with this challenge.