Yalla Balagan! A collection of my CTF writeups and solutions.

Basic JWT token vulnerability, if you supply none in the alg field, it doesn’t verify the signature.

FLAG

Flag: S1gn4tuR3_v3r1f1c4t10N_1S_1MP0Rt4n7