Every challenge. All the results.

While pentesting your client Duck Store in a white-box engagement, you're looking for data the client never handed over: something you can use to pivot deeper into their network. You are focusing on their email feature.

While in your office, you accidentally bump into a colleague’s desk in your governmental organization. His Rubik’s cube falls to the ground, revealing a hidden SD card inside. Curious, you begin investigating its contents. After performing basic forensic analysis, you uncover fragments of an authorization middleware along with network logs pointing to a website. The logs eventually lead you to a JWT (eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6OCwidXNlcm5hbWUiOiJlZHdhcmQiLCJyb2xlIjoidXNlciJ9.SLM9rSFU-8LeBDkdthVDr8VZzEtP5TyuVJHFdAAhfiQ).