web challenge
Preflight Whisper
Granite Peak Systems is investigating its asset tracker after an API gateway exposes diagnostic routing metadata only during preflight-style requests. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Granite Peak Systems investigate its asset tracker after an API gateway exposes diagnostic routing metadata only during preflight-style requests. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Use HTTP method behavior to trace the route chain and capture the flag.
Skills
What you will practice
- OPTIONS
- HTTP headers
- multi-step discovery
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range