web challenge
Two Part Request
Alder & Finch Legal is investigating its vendor portal after a diagnostics workflow split its trust signal between a browser cookie and a proxy header. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Alder & Finch Legal investigate its vendor portal after a diagnostics workflow split its trust signal between a browser cookie and a proxy header. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Recover both request conditions and reproduce the trusted request.
Skills
What you will practice
- cookies
- custom headers
- request crafting
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range