---
id: 4626
title: "Dojo challenge #52 Streamcore solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-52"
published_at: "2026-07-15 11:45"
tags: ["appsec", "ctf", "web-security", "path-traversal", "jwt", "dojo", "yeswehack"]
phying_url: "https://phying.com/item/4626"
lang: en
---

# Dojo challenge #52 Streamcore solution

## Summary

Dojo challenge #52 Streamcore solution: the JWT handler trusts the unsigned 'kid' header before signature checks; path traversal reads /tmp/README.txt, whose contents sign an admin token.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-07-15 11:45
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-52
- **Phying News:** https://phying.com/item/4626