🔐 JWT Challenge

💡 Challenge Objective

Login as guest (password: guest123) and obtain a JWT token. The token is signed but has vulnerabilities. Manipulate it to gain admin access and retrieve the flag.

Hints:
• Decode the JWT and examine its structure
• Look at the algorithm used (HS256)
• You need admin role to get the flag