BUGLYST.
search
Track

HTTP/API

Practice request contracts, headers, pagination, parsing, CORS behavior, and API edge cases.

Skills trained

  • checkRead request paths
  • checkValidate API contracts
  • checkReproduce boundary cases

Recommended path

terminalThe Missing Header
Easychevron_right
terminalPagination off by one
Easychevron_right
terminalCORS origin parsing bug
Mediumchevron_right
terminalStatus before error check
Easychevron_right
terminalNo content with body
Easychevron_right
terminalLowercase header lookup
Mediumchevron_right
terminalUnencoded query params
Mediumchevron_right
terminalSilent failure as 200
Hardchevron_right

Ready incidents

Playable now through the existing challenge engine.

terminalThe Missing Header
Easychevron_right
terminalPagination off by one
Easychevron_right
terminalCORS origin parsing bug
Mediumchevron_right
terminalThe File That Left the Vault
Mediumchevron_right
terminalThe Filter That Swallowed False
Mediumchevron_right
terminalThe Redirect That Left the Building
Mediumchevron_right
terminalThe Webhook That Trusted Silence
Mediumchevron_right
terminalWebhook signature tolerance too wide
Mediumchevron_right
terminalPagination: total counted after slicing
Easychevron_right
terminalCORS startsWith() allows lookalike origins
Easychevron_right
terminalCursor built from a non-unique column
Mediumchevron_right
terminalCORS allows the null origin unconditionally
Hardchevron_right
terminalStatus before error check
Easychevron_right
terminalNo content with body
Easychevron_right
terminalLowercase header lookup
Mediumchevron_right
terminalUnencoded query params
Mediumchevron_right
terminalSilent failure as 200
Hardchevron_right

Planned Debugging 50 patterns

Visible for roadmap context only. These entries are not playable.

17Boolean Query Param Trap
Planned
18Header Case Mismatch
Planned
21Off By One Page Start
Planned
23Missing Content-Type Charset
Planned
25Empty Array Treated As Missing
Planned
30Pagination Last Page Empty
Planned
52Log Redaction Missing
Planned