← All labs
Redirect Level 2 / 6 Medium

Host-Check Bypass

The app checks that the target starts with the trusted host. Escape it.

Continue to your destination

This forwarder only accepts targets that start with the trusted site. Get a victim off-site anyway.

Allowed prefix: https://uncrypt.io

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.