Avatar

Labs / HTTP Smuggling

  • Daily Challenge
  • Released 06 Oct 2025

Can you detect the hidden HTTP request lurking in plain sight?

Deep within seemingly normal web traffic, a malicious request hides in the shadows, exploiting how servers disagree on HTTP boundaries. This sneaky technique has compromised major websites and bypassed enterprise security systems! Armed with network forensics skills and protocol knowledge, you'll uncover how attackers manipulate HTTP headers to smuggle unauthorized requests past security controls. Time to expose this invisible threat!

1
Flags
1
Points
Daily Challenge
Free Access
Start Lab Environment

Launch your dedicated AWS machine to begin hacking

~1-2 min setup
AWS dedicated
Private instance
Industry standard
Daily Challenge

Solution Coming Soon

The solution for this lab will be available on 16 Oct 2025 16:00 UTC.

To keep the new labs challenging for everyone, solutions are only available 1 month after a lab has been released or when it gets archived, whichever comes first.