api challenge
Approval Chain
Copperline Telecom is investigating its operations API after a two-step approval API exposes the approval token after a preliminary validation request. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Copperline Telecom investigate its operations API after a two-step approval API exposes the approval token after a preliminary validation request. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Complete both POST stages in order and capture the flag.
Skills
What you will practice
- multi-stage API
- JSON POST
- state handoff
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range