← All Challenges
Challenge 26 of 66
Secret Cracker
🟡 Medium
Auth
+75 XP
A JWT token is signed with a weak secret. Crack it using a wordlist, then forge a token with admin privileges.
Use jwt_tool or hashcat mode 16500 to crack the HMAC secret from the token.
🏆 Challenge Complete!
Know someone who would enjoy this? Challenge them.
Keep going
Make it count.
Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free