FeedDiscussion
FAM CTF : The Vault Door Writeup
Summary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts
exploitnotes.hashnode.dev4 min read
#famctf#famctf-2026#the-vault-door#jwt#json-web-token#alg-none#jwtauthentication#jwt-security#jwt-bypass#authentication-bypass#authorization-bypass#cookie-manipulation#session-security#web-exploitation#api-security#web-security
Responses
No responses yet.