Insecure Storage Audit
mobile · easy · +35 XP
Target
GET /api/lab/insecure-storage-101/ls (lists app data files)
GET /api/lab/insecure-storage-101/read?path=... (reads any file in /data/data/com.acme.app/)
POST /api/lab/insecure-storage-101/submit body {token} (the leaked auth token)
Goal: walk the directory, find shared_prefs/auth.xml, parse the cleartext token, submit it.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/insecure-storage-101/
// reuse on the cli
// submit flag
// no solves yet
4 of 12 · mobile