Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Web-27. GraphQL Introspection Leak
Mission
This GraphQL API exposes a schema of User objects with introspection enabled. Investigate whether undocumented queries or fields exist beyond what the default UI shows.
Not started
Hints
Hint 1Show
A GraphQL introspection query can retrieve the entire schema
Hint 2Show
Try using __schema and __type
Hint 3Show
There may be undocumented queries or fields not shown in the UI