HTTP Basics


Web API Practice.

Learn the fundamentals of making HTTP requests



Challenges

Hello API

Your first API interaction! Make a simple GET request to receive the flag.

Objective

Send a GET request to /api/hello

Example

curl http://challenge/api/hello

Good luck!

Connect with SSH

Link your SSH key, then connect with: ssh hacker@dojo.idg.ctf

Query Parameters

Learn to pass data via URL query parameters.

Objective

Send a GET request to /api/greet with a query parameter name set to developer

Example

curl "http://challenge/api/greet?name=developer"

Hint: Make sure to use the exact value!

Connect with SSH

Link your SSH key, then connect with: ssh hacker@dojo.idg.ctf

Custom Headers

APIs often require custom headers for identification or configuration.

Objective

Send a GET request to /api/secret with the header X-API-Version set to 2.0

Example

curl -H "X-API-Version: 2.0" http://challenge/api/secret

Connect with SSH

Link your SSH key, then connect with: ssh hacker@dojo.idg.ctf

User-Agent Header

The User-Agent header identifies your client to the server. Some APIs check this!

Objective

Send a GET request to /api/mobile with the User-Agent header containing MobileApp

Example

curl -A "MobileApp/1.0" http://challenge/api/mobile

Or:

curl -H "User-Agent: MobileApp/1.0" http://challenge/api/mobile

Connect with SSH

Link your SSH key, then connect with: ssh hacker@dojo.idg.ctf

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

7-Day | 30-Day | All-Time

Rank Hacker Badges Score