uncrypt/playground
AI Sec Level 14 / 10 Hard
← All labs

Model Extraction

An internal export endpoint mints full model copies — gated by a key the public config page leaks. Take the weights.

Fine-tune console

Uncrypt mints full copies of fine-tuned models on request. Exports are authorised by an internal X-Export-Key header. Request one.

Browsers cannot set custom headers on form posts — present the header with your proxy.

Inspect the runtime config this page loads →

GET /internal/runtime/config — fetched by this page on load

{ "model": "uncrypt-gpt-mini", "version": "2.4.1", "region": "eu-west", "export_endpoint": "/internal/model/export", "export_key": "uncrypt-live-9f2c" }

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.