i tried to access /admin using my token but it gave me {“error”:“Unauthorized”}
1 Like
does the account data return admin set to 1?
no 0 so if we managed to return 1 we’ll be an admin.
I have some hashes. Hope they crack
1 Like
have tried to crack’em. No luck so far
bruh where you guys finding hashes 
the hashes seem not crackable though. bcrypt
Ya I’ve moved on to other enumeration
1 Like
There are other ways to use a hash
Yeah no luck until now either. Really cool looking box from what it looks like atm 
ifs still a possibility but yea most likely its something else
where is everyone finding these hashes? Any hints pls
1 Like
I still trying to find where is everyone getting the hashes D:
I found where to use the hashes you found but I can’t seem to dumpe the hashes.
Anyone had any luck messing with the decoded values for the JWT?
Brutal
yeah…
Exchange notes? I can dump the hashes but can’t seem to find what to do with them
1 Like