Pocket CTFMedium
ReferenceSwitch trackTiny board.
Real lessons.
Capture all 6 flags. Everything you need is inside this isolated network.
OPEN
1. Header Hunter
Inspect information outside the rendered response body.
InvestigateOPEN
2. Object Reference
Test whether changing an object identifier changes authorization.
InvestigateOPEN
3. Method Maze
Discover how one endpoint behaves across HTTP methods.
InvestigateOPEN
4. Layered Token
Decode and assess an unsigned authorization token.
InvestigateOPEN
5. Profile Overflow
Test whether a profile update binds fields the form never offered.
InvestigateOPEN
6. Proxy Pass
Audit whether a forwarding header is trusted as proof of origin.
InvestigateSubmit a flag
Progress: 0 / 6