Loading page
Review the challenge brief, files, and requirements.
PhantomBank lets customers manage accounts through a web portal backed by JWT-based sessions and several internal microservices. During a routine security assessment you notice the authentication layer exposes more than it should, and the backend services trust each other implicitly. Exploit the gaps between these trust boundaries to reach the flag.
Sign in to attempt this challenge.
This challenge is played in the labs environment.
Open Labs