Session Inspector

This service decrypts AES-128-CBC session tokens and checks your role.

Your sample session token (hex-encoded):

f751272d8b269b699103ac8c4b756ae976ca692cbdc5ad60e601375b26677bd87e7791cfd054e399bc976aa79cb410da

Token format: user=USERNAME;role=ROLE

Only users with role=admin can access the flag.

API

• POST /decrypt — body: {"ciphertext": "HEX"}
• POST /encrypt — body: {"plaintext": "TEXT"}

Try It