Web - Server

Help is needed. What to do?
The token is always blacklisted. In this case, the signature is validated. What to fix?

1) Need to get the value of the SECRET constant?
2) Can I somehow get into the blacklist?
3) Do using headers or pass through json?

I am also trapped in these problems,can manager give some hints?

HA-HA-HA-HA-HA-HA-HA-HA-HA-HA-HA-HA-HA-HA

What I just did not read during these 3 days)))))))))))))))))))))))))))))))))))))))

idea, if you don’t have any you may also stay quiet. Your post doesn’t help anyone…

others; have a look here

So no one helped me, I myself found ways in the open spaces of the forum. Others may do the same. )))
Have a nice day )))

idea,

The best hint is given by m31z0nyx :

« Read the code and watch what kind of data you are manipulating, RFC 4648 may help »

Maybe you should try Challenges/Steganography/Base-Jumper before this one.

Good Luck!

I need help please I tried everything, I dont know how to bypass blacklisting check what to modify in payload. I tied modifying jti but no luck. help me please, I completely new to the web security.