Warm-up
Your first hack, in 60 seconds
Every Daily Hack works the same way: read the briefing, look at the evidence, type the answer. Try it here first - no XP, no pressure.
Mission briefing
Developers sometimes leave notes in a page's source code that visitors never see. This login page ships one. Read the source below and find the staff password.
Investigate
<form action="/login" method="post">
<input name="user" placeholder="Username">
<input name="pass" type="password" placeholder="Password">
<!-- TODO: remove before launch - staff password is "sunrise" -->
<button>Sign in</button>
</form>
Your answer
Daily Hack #137
First blood
M2F14M3
Solved by
The key the heap kept
Mission briefing
Situation
Voltaro's billing app exposes Spring Actuator
The hack
A heap dump holds what /env masks
Goal
Recover the payment API key it really uses
Investigate
Your answer
Play freely - sign up to submit your answer and earn XP.
Solved!
+10 XP
First blood! You were first to crack today's hack.
How it works