Progress

0 / 6 findings triggered this session. Each mini-lab is isolated: decode its token first, then work the single bug in play. NO FLAGS — this is just a tally.

⬜ NAKED alg:none accepted - unsigned admin token authenticates

⬜ NAKED weak HS256 secret cracked - forged admin token accepted

⬜ NAKED kid header path traversal - sign with an empty/known key file

⬜ NAKED exp never validated - an expired admin token still authenticates

⬜ NAKED predictable reset token forged - admin account taken over

⬜ METHOD which-attack - reached admin via the ONE viable forge

More hands-on practice → labs.hackxpert.com