Capture the FlagEasy
Decode the Session
Lab for Authentication, Identity & Non-repudiation
Scenario
Authentication is about proving who you are, and web apps carry that identity in tokens. This one base64-encodes a JSON session blob (just like a JWT payload). Decode it to read what it claims.
Objective
Recover the identity a base64-encoded session token is carrying.
lab ~ decode the sessionnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.