An entitlement check runs client-side against a verdict the server already sent. Rewrite the verdict on its way back and unlock the gated resource.
Premium report
This resource is entitlement-gated. Click below to check your access. The verdict is decided by
the server and re-checked in your browser — intercept the response with a proxy and rewrite the
verdict before it reaches the page.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you.
The rest of CSPSHIVAM Playground is not part of the target.
Category complete
You earned a badge
Enter a name to put on your badge, then download it.
Caption copied. Post your badge on LinkedIn or Instagram with #CSPSHIVAMPlayground.
If the download is blocked, a screenshot works just as well.