
CTF for HDE 64 students at See Security College. Exploit a JWT (web part) & CVE-2021-3156 (LPE part).
This CTF is not using DB for authentication. In addition to that, this CTF generates static tokens because of the following:
Minimize the chances of a user solving this CTF in a different way
Minimize the chances of a user missing hints by modifying or bypassing web pages/tokens.
Less traffic
More reliability for users solving this CTF.
ubuntu 20.04 is recommended for the LPE part. If you clone this, please delete this README.md file because it contains some hints.