Cookie Jar
1 team solved
300 pts
This app trusts a client-supplied session cookie a little too much. Decode it, tweak the role field, and re-encode.
echo 'eyJhbGciOiJIUzI1NiJ9...' | base64 -dThe payload is not signed the way you'd expect.
Sign in with GitHub to submit a flag.