api challenge
Undocumented Docs
Meridian Credit Union is investigating its customer support portal after the API landing response still advertises a documentation route the application team forgot was public. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Meridian Credit Union investigate its customer support portal after the API landing response still advertises a documentation route the application team forgot was public. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Use the API documentation to locate the exposed flag endpoint.
Skills
What you will practice
- API documentation
- JSON
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range