Challenges → API Security

ID Enumeration

Easy 100 pts 🚩 22 solves ⏱ Avg. time to solve: 55d 20h

Challenge Question

This API tells you exactly who you're logged in as, complete with your user ID sitting right there in the URL. Nothing about the endpoint actually stops you from asking about someone else's profile instead of your own.
Access Challenge →

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryAPI Security
  • Authortark
  • AddedJul 4, 2026
  • Avg. Time to Solve55d 20h
  • First Blood🩸 esharma

Recent Solvers

  • licvzwl 11h ago
  • piyush69 5d ago
  • Max Oct 18, 2026
  • JSterling Oct 12, 2026
  • domireversiii Oct 9, 2026
  • amalmj Oct 9, 2026
  • V1XU Oct 4, 2026
  • ajay Oct 2, 2026
  • Nyx_Nightmare Sep 29, 2026
  • harshi416 Sep 28, 2026
Discuss in the forum →