api challenge
Bootstrap Cookie
Granite Peak Systems is investigating its operations API after an old bootstrap endpoint still issues the session cookie required by a protected API route. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Granite Peak Systems investigate its operations API after an old bootstrap endpoint still issues the session cookie required by a protected API route. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Establish the bootstrap session and access the protected resource.
Skills
What you will practice
- cookies
- session flow
- API
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range