Grab a Bearer token
Practitioner 20 ptsGoal: Read the bearer token an API call carries in its Authorization header.
Capture it yourself — real traffic
- Open Wireshark on your active interface and start a capture. Display filter for this level:
http.request. No GUI?sudo tcpdump -i any -w cap.pcap port 9080. - Open the plaintext lab and click Generate traffic once.
- Stop the capture. The secret is in the
Authorization: Bearerheader on/api/profile. Expand the request headers and read theBearertoken verbatim (no decoding needed).
Open the plaintext lab (:9080) →
Genuinely unencrypted — the secret exists only on the wire, never on the page.
Hints
Open in order — they nudge, not solve.
Hint 1
Find the request to /api/profile and open its headers.
Hint 2
This one is Authorization: Bearer <token> — no Base64, the token is verbatim.
Hint 3
The BEARER-… token is the answer. It's a long-lived credential — catching it is a lasting compromise.