You intercepted a JSON Web Token (JWT). The signature uses HMAC-SHA256 with a weak secret. Crack the secret to reveal the embedded flag.
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmbGFnIjoiRkxBR3tKV1RfQ1JBQ0tFUn0ifQ.4mNqZ5Pz1m1FvZcZq9zA2MZqvJz5FJfZ3rM1N9KcW9k