Challenges → API Security

ID Enumeration

Easy 100 pts 🚩 0 solves ⏱ Avg. time to solve: 7h 10m

Challenge Question

This API tells you exactly who you're logged in as, complete with your user ID sitting right there in the URL. Nothing about the endpoint actually stops you from asking about someone else's profile instead of your own.
Access Challenge →

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryAPI Security
  • Authoradmin
  • AddedJul 4, 2026
  • Avg. Time to Solve7h 10m
  • First Blood🩸 prompt_inject

Recent Solvers

  • prompt_inject Jul 4, 2026
Discuss in the forum →