web challenge
Entity Tag Trail
Summit Municipal IT is investigating its operations API after cache metadata on a health resource contains a route marker that was never meant for users. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Summit Municipal IT investigate its operations API after cache metadata on a health resource contains a route marker that was never meant for users. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Use response metadata to identify and access the sensitive route.
Skills
What you will practice
- ETag
- HEAD
- HTTP metadata
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range