Hands-on lab
The Token That Signs Itself
A bank back office keeps your session in a signed token. Its verifier also accepts a token that says "no signature required" — so forge one that makes you the controller, set it, and open the vault. The reference inside is yours.
Labs give each member a unique flag, so you need an account to take one. Sign in or create one — a username and a passphrase, no email.