web challenge
Stateful Detour
Westgate Insurance is investigating its vendor portal after a support workflow exposes a route and state value in different parts of a session handoff. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Westgate Insurance investigate its vendor portal after a support workflow exposes a route and state value in different parts of a session handoff. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Preserve the session state, reconstruct the final request, and capture the flag.
Skills
What you will practice
- cookies
- query parameters
- multi-stage HTTP
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range