UIUCTF - Fare Evasion - (Web - MD5 SQLi)

Follow along with my blog for detailed insights: www.cyberdonal...
In this video, we dive into the UIUCTF CTF 2024 web challenge - Fare Evasion! This challenge involves manipulating a JWT token to include a vulnerable MD5 SQLi query via a JWT KID header, that allows us to obtain a secret signing key to sign our own JWT token and retrieve the flag.
Check out the Nahamcon CTF 2024 here: 2024.uiuc.tf/
A big shoutout to ‪@sigpwny‬ ‪@Illinois1867‬ for organizing this incredible event.
#Cybersecurity #CTF #websecurity #burpsuite #InfoSec