crypto challenge

URL Safe

★★★☆☆450 XP20 minutes

Summit Municipal IT is investigating its operations API after a client token stores a route using URL-safe Base64 without padding. Step in as the responder and follow the evidence.

Incident briefing

Scenario

You have been brought in to help Summit Municipal IT investigate its operations API after a client token stores a route using URL-safe Base64 without padding. The environment is intentionally vulnerable and isolated for this exercise.

Objective

Recognize the representation, recover the route, and capture the flag.

Skills

What you will practice

Ready to practice?

Launch an isolated target

Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.

Enter range