A layered token | Hunt the Flag

Labs need a computer

Open this page on a computer, or make the browser window larger.

Files

misc-token.zip
Size: 527 B
SHA-256
2364adb4d57bcd64ca79871a72d3dc526897d657ce51d5085137fa1628791091
Download

After downloading, compare the file SHA-256 with the value shown here to make sure it arrived intact.

Tools you may need

CyberChef
To peel the layers one by one.

Scenario

A Ravens session token encoded in layers like a JWT payload. Decoding the outer layer gives JSON, and decoding the inner data field gives the flag.

What you are looking at

You download misc-token.zip with token.txt, a base64url token of JSON with an encoded data field.

Goal

Peel the token layers to extract the flag.

What counts as solved

You enter the correct flag.

Method checklist

Tick each step as you work through it. The steps are the method, not the answer.

Open token.txt.
Base64url-decode to reveal JSON.
Take the data field.
Base64-decode data and read the flag.

Hints

You have not revealed a hint yet. Ask the falcon when you need one.