Assistant status
Ops can flip a debug switch that makes the runtime answer with its backend configuration. The
switch is a debug=1 cookie — and production never hands that out. Read the debug view anyway.
The page sends no such cookie; neither should your browser. Decide for yourself what the endpoint accepts.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
Check the solution on the walkthrough page →This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.