Type your comment> @jimmy00 said:
Just to reiterate, once you find all the credentials (after the jwt token part), you need to check for websites for 401s!
I could only find one single 401 status page with dirbuster. Is there any more than that? Also, is there any 403 by any chance? I am not able to find it…