SGSPECTER.GHOSTCOMMUNITY EDITION
← LABS
// GUIDED TRAINING · Web

Shop Session

Session management

Easy200 PTSOFFLINE SIMULATION
// 01 · LEARN

SESSION MANAGEMENT

Cookies bind requests to sessions. HttpOnly limits script access, Secure requires HTTPS, and SameSite helps reduce cross-site request risks.

LEARNING GOAL

Identify the failure from the supplied synthetic evidence and explain a defensive fix.

// 02 · INVESTIGATE

EVIDENCE

HTTP/1.1 200 OK
Set-Cookie: sid=demo-847; Path=/; HttpOnly; SameSite=Lax
X-Review: cookie_transport_requires_tls
HINT

The Set-Cookie header lacks Secure.

// 03 · PRACTICE

KNOWLEDGE CHECK

Which cookie setting is missing from the synthetic session response?

// 04 · CAPTURE FLAG

Submit the review marker in SG{marker} format.

Progress stays in this browser.