api challenge

Next Page, Wrong Place

★★☆☆☆300 XP12 minutes

Atlas Field Services is investigating its billing gateway after a pagination cursor is accidentally crossing from public records into an internal result set. Step in as the responder and follow the evidence.

Incident briefing

Scenario

You have been brought in to help Atlas Field Services investigate its billing gateway after a pagination cursor is accidentally crossing from public records into an internal result set. The environment is intentionally vulnerable and isolated for this exercise.

Objective

Follow the pagination metadata and capture the exposed flag.

Skills

What you will practice

Ready to practice?

Launch an isolated target

Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.

Enter range