Pocket CTFRiver Station 14

Reference Switch track

TRUSTED GATEWAY

TRUSTED GATEWAY

Task: Show why the maintenance API treats an external request as internal.

Evidence locker

gateway-proxy.conf

FINDING OPEN

Use any HTTP client that can set a request header, then submit the current diagnostic code returned by /api/station/diagnostic.

Diagnostic codeTrust flaw

Need a nudge?