web challenge
Cache Me If You Can
Harborline Logistics is investigating its asset tracker after a maintenance endpoint treats a cache validator as an authorization condition. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Harborline Logistics investigate its asset tracker after a maintenance endpoint treats a cache validator as an authorization condition. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Recover the validator value and satisfy the precondition.
Skills
What you will practice
- ETag
- If-Match
- HTTP preconditions
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range