https://giuseppedandrea.it/tags/json-web-token/ Recent content in JSON Web Token on Giuseppe D'Andrea Hugo en Tue, 25 Nov 2025 00:00:00 +0000 https://giuseppedandrea.it/posts/intigriti-challenge-1125/ Tue, 25 Nov 2025 00:00:00 +0000 https://giuseppedandrea.it/posts/intigriti-challenge-1125/ <h2 id="introduction"> Introduction <a class="heading-link" href="#introduction"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Hi folks! This write-up documents my solution to <a href="https://challenge-1125.intigriti.io/" class="external-link" target="_blank" rel="noopener">Intigriti&rsquo;s November 2025 Challenge</a> created by <a href="https://x.com/intigriti" class="external-link" target="_blank" rel="noopener">Intigriti</a>. The goal was to find a hidden flag (in the format <code>INTIGRITI{.*}</code>) by exploiting a Remote Code Execution (RCE) vulnerability in a fictional e-commerce platform called &ldquo;AquaCommerce!&rdquo;.</p> <p>This marks my first attempt at an Intigriti challenge, and I have to say that it was a really fun (and &ldquo;easy&rdquo;) one! Let&rsquo;s dive into the solution!</p>