Daily Hack
A fresh 60-second challenge every day. Solve it, earn XP, and keep your streak alive.
Daily Hack #75
Who pulled the keys
A debug endpoint was left exposed and it serves private key material. In your app logs, most traffic is normal app pages, but one IP keeps hitting /debug/keys and /.well-known/private-keys and getting a 200 every time - it is quietly downloading the secrets. Filter the suspicious paths, find the single source pulling key material, and submit its IP.
Play freely - sign up to submit your answer and earn XP.
Solved!
+10 XP
First blood! You were first to crack today's hack.
How it works