Tags: ssti web confusion jwt 

Rating:

Original writeup (https://blog.raw.pm/en/HackTheBox-CyberSantaCTF-2021-write-up/#Naughty-or-Nice-Web).