← all labs
Advanced
WEB+SSH
★★★☆☆

Token Forger

Forge authentication tokens

/start jwt
21
Total Solves
33m 29s
Avg Solve Time
1
First Blood Claimed
1m 48s
Record Time

// FIRST BLOOD

fast_and_tactical 🩸
cracked in 14m 40s

// TOP 10 FASTEST

#1 「 ✦ Rimuru ✦ 」 1m 48s
#2 Mr_robot0h 5m 43s
#3 privalman 10m 22s
#4 bussi 11m 38s
#5 YmaKCMamoto 14m 17s
#6 TheCyberVendetta 14m 26s
#7 User 4099 14m 40s
#8 7gL_h 14m 50s
#9 Rocostre 18m 46s
#10 Lazy_Dino 19m 5s

// RELATED · Advanced TIER

Template Injection
WEB+SSH Execute code through template engines
★★★☆☆
Root Access
SSH Escalate from user to root via SUID
★★★☆☆
Internal Access
WEB+SSH Access internal services through SSRF
★★★☆☆
Hash Cracker
WEB+SSH Crack weak password hashes from an exposed database
★★★☆☆
Blind Injection
WEB+SSH Extract data through boolean-based blind SQL injection
★★★☆☆
Race the Clock
WEB Exploit a race condition to bypass purchase limits
★★★☆☆

Spawn this box.
Capture the flag.

Join the Discord and type /start jwt to spin up your own container.

join discord → sign in with discord