2 :80

===============================================================
2021/04/28 17:14:03 Starting gobuster in directory enumeration mode
===============================================================
/login                (Status: 200) [Size: 1250]
/register             (Status: 200) [Size: 1422]
/admin                (Status: 403) [Size: 9]
/logout               (Status: 302) [Size: 209] [--> http://10.10.10.230/]

Login Page Enumeration

Found usernames:
admin

Coudn't find anything, looking at auth token,

# base64 decode
{"typ":"JWT","alg":"RS256","kid":"http://localhost:7070/privKey.key"}{"username":"kashz","email":"[e-mail]","admin_cap":false}
+ lots of garbage

Its a JWT, Using JWT.io

# header 
{
  "typ": "JWT",
  "alg": "RS256",
  "kid": "http://localhost:7070/privKey.key"
}
# payload
{
  "username": "kashz",
  "email": "[e-mail]",
  "admin_cap": 0
}