Read a custom response header
Apprentice 10 ptsGoal: Find a token the server exposes in a non-standard response header.
Capture it yourself — real traffic
- Open Wireshark on your active interface and start a capture. Display filter for this level:
http.response. No GUI?sudo tcpdump -i any -w cap.pcap port 9080. - Open the plaintext lab and click Generate traffic once.
- Stop the capture. The secret is in the
X-Build-Tokenheader on the/api/buildresponse. Expand the response headers and read the customX-Build-Token:value.
Open the plaintext lab (:9080) →
Genuinely unencrypted — the secret exists only on the wire, never on the page.
Hints
Open in order — they nudge, not solve.
Hint 1
Look at the response to /api/build. Filter http.response.
Hint 2
Expand its header block and find the custom one — X-Build-Token:.
Hint 3
Its value (BUILD-…) is the answer.