Daily Hack

A fresh 60-second challenge every day. Solve it, earn XP, and keep your streak alive.

Next hack in --:--:--
Daily Hack #59

SSRF to the internal KV store

Network & Infrastructure Difficulty Hard ~10 min +10 XP

This health-check fetcher has a guard: it blocks external hosts but happily allows loopback, because "only internal services live there." That assumption is the bug. Probe the loopback interface, follow the hint the server leaks when you knock on the wrong door, and pull the flag out of the internal key-value store it points you to.

Play freely - sign up to submit your answer and earn XP.

Solved! +10 XP
First blood! You were first to crack today's hack.
How it works

Nice one!

Sign up free to claim your +10 XP and start your streak.

Claim +10 XP - sign up free
Contributors

Credited contributors

These hackers reported issues, improved content, and helped harden this page.

20,000+ Hackers 100+ Labs & Courses Free
Start Hacking Free