CSZone — Final Checkpoint Gate

Scenario 8 // Multi-Stage Chained Verification

Central Security Checkpoint

CHAINED EXPLOITATION

This terminal secures the range's core flag vault. It does not accept direct logins. Instead, it requires proof of two artifacts recovered across earlier stages.

Artifact 1 — Administrative Cookie (Scenario 06)
✘ Missing (Cookie: access_level=••••••••••)
Artifact 2 — Service Credential Key (Scenario 07)
✘ Missing (?key=•••••••••••)
[-] Gate Locked: Awaiting required chained artifacts: Admin Session Cookie (Scenario 06) + Service Password Key (Scenario 07).
🛡 Burp Suite Repeater & Chained Exploitation Guide:
  1. Send the request GET /finale/index.html?key=[SCENARIO_07_PASSWORD] to Burp Repeater (Ctrl + R).
  2. In Repeater, ensure the request carries the header: Cookie: access_level=[SCENARIO_06_COOKIE].
  3. Send the request to receive the encrypted ciphertext payload or unlocked flag.
  4. Open CyberChef ➔ apply From Base64 ➔ apply XOR with your recovered Scenario 07 password as the key.