Challenges → API Security

GraphQL Gauntlet

Insane 800 pts 🚩 17 solves ⏱ Avg. time to solve: 31d 1h

Challenge Question

Lightweight PHP GraphQL-style endpoint with introspection abuse and an IDOR chain.
Access Challenge →

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryAPI Security
  • Authortark
  • AddedAug 21, 2026
  • Avg. Time to Solve31d 1h
  • First Blood🩸 Aryaveer_0x1

Recent Solvers

  • linhmu3 2d ago
  • BlackCipherX 5d ago
  • piyush69 5d ago
  • Max Oct 18, 2026
  • amalmj Oct 9, 2026
  • V1XU Oct 3, 2026
  • 0x45h1k Oct 2, 2026
  • ajay Oct 2, 2026
  • Jessu Sep 29, 2026
  • Prajansanjayk Sep 22, 2026
Discuss in the forum →