web challenge
Two Halves
Meridian Credit Union is investigating its reporting service after two unrelated-looking pages expose separate fragments of a request key used by a maintenance endpoint. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Meridian Credit Union investigate its reporting service after two unrelated-looking pages expose separate fragments of a request key used by a maintenance endpoint. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Correlate the fragments and reconstruct the final request.
Skills
What you will practice
- correlation
- query parameters
- multi-step discovery
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range