Daily Hack
A fresh 60-second challenge every day. Solve it, earn XP, and keep your streak alive.
The cert that named it
Caldera Freight has one application its security team is certain is not on the internet. It has no public DNS record anyone remembers creating, it is not linked from the website, it is not in any search index, and the README says in plain words that it is internal only. You have been asked to check that claim from the outside, with nothing but public records. There is a way in, and it is not a wordlist. Every time a certificate is issued for a name, that name is written to a public, permanent, append-only log, and nobody at Caldera was thinking about that log the day they bundled two hosts onto one certificate to save themselves a renewal. Work through the records, discard the names that are dead or that belong to someone else, and submit the internal hostname that is actually live on the public internet.
Play freely - sign up to submit your answer and earn XP.