https://n9o.xyz/tags/jwt/ Recent content in JWT on Hugo -- gohugo.io en © 2026 Vaishnav Baraskar Tue, 23 Apr 2024 00:00:00 +0000 https://n9o.xyz/capturetheflag/ironctf/ Tue, 23 Apr 2024 00:00:00 +0000 https://n9o.xyz/capturetheflag/ironctf/ <h2 class="relative group">0x00 – Prologue <div id="0x00--prologue" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100"> <a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline" href="#0x00--prologue" aria-label="Anchor">#</a> </span> </h2> <p>I like JWT bugs. They&rsquo;re like puzzles where you know someone somewhere made a careless design call, and you just have to figure out where the glue fell apart. In this one, the challenge was called &ldquo;JWT Hunt&rdquo; and it lived up to the name. Turns out the devs had split the signing key into four parts and sprinkled them around the site like cryptographic breadcrumbs.</p> https://n9o.xyz/bugbounty/healthtrack/ Mon, 19 Feb 2024 00:00:00 +0000 https://n9o.xyz/bugbounty/healthtrack/ <h1 class="relative group"><strong>Prologue: Coffee, Curiosity &amp; an API</strong> <div id="prologue-coffee-curiosity--an-api" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100"> <a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline" href="#prologue-coffee-curiosity--an-api" aria-label="Anchor">#</a> </span> </h1> <p>It was one of those quiet February evenings. No caffeine left in the mug, but my curiosity was wide awake. The glow from the screen illuminated my desk, casting a soft digital haze. I was drifting through recon mode—scrolling API docs, poking endpoints, intercepting calls like I was casually flipping through a dusty book in a forgotten archive.</p>