Avatar

Labs / Header Hijacker

  • Daily Challenge
  • Released 19 Sep 2025

🕵️ Can you manipulate your way past the security headers?

This secure web portal thinks it can control access using HTTP headers and client-side restrictions. 🛡️ But seasoned security researchers know that anything controlled by the client can be manipulated! 🔧 Master the art of header manipulation and discover how seemingly secure applications can be bypassed with the right techniques. 🎯

1
Flags
1
Points
Daily Challenge
Free Access
Start Lab Environment

Launch your dedicated AWS machine to begin hacking

~1-2 min setup
AWS dedicated
Private instance
Industry standard
Daily Challenge

Solution Coming Soon

The solution for this lab will be available on 29 Sep 2025 00:00 UTC.

To keep the new labs challenging for everyone, solutions are only available 1 month after a lab has been released or when it gets archived, whichever comes first.