Mini-game · Chapter 5

IDOR Hunter

You are logged in as user42. The API below has eight endpoints. Some leak other users' data or let you change things you shouldn't. Probe each one, watch the response, then mark it as Safe or Broken. Submit the audit when you are done.

Educational training material. This game demonstrates an attack technique inside a sandboxed quiz UI for security learning. Do not apply these techniques against systems you do not own or have explicit written permission to test.

Endpoints probed 0 / 8 Score 0 Time 00:00