Course enrolment
Enrolment on this course is served only to the modern API client. The server detects who is asking
from the X-API-Version request header — browsers never send one, so the web experience stays
read-only.
Detected client: web browser
The version rides in a request header. Nothing on this page can set it — your proxy can.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
Check the solution on the walkthrough page →This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.