Challenge: Header Hunt
⚠️ Flags are recovered inside isolated labs. Submission is verified server-side.
A simple web app leaks a flag in a custom response header. The flag is a 3-word phrase about what response metadata does.
Category: Web
Hint: HA{headers_..._...}
Submit flag
loading…