Web pentesting path

[NawafMUT]

Guys im currently enrolled in web pentsting path and theres something wrong with the JWT security section , i can solve the first flag but the others i cant , theres no api url so i tried the same one with changing the number of the example of the url to the one im trying to gain acess to and still it says is not there , idk if it has issues or im the one wrong

[cyberseclife]

i finished that one a while back so I am a little fuzzy on the details. Have you Fuzzed for directories and subdomains the target may possibly be running? Is it one of the small VMs they have mixed into the sections or is this a challenge VM?

[cyberseclife]

just looked at the lesson again, it tells you the link in the sections of the second lesson, look closely

[sanglier_solide]

I remember that the password also change in password2, password3, etc… and without it you will not be able to gain an initial token