Cohort enrolment
Clicking Enrol below issues a GET. The endpoint quietly ignores GET requests — it only listens on a different channel. Move the request across methods in your proxy and resend it.
Enrol
Nothing happened? Look at what that click actually sent — the verb is part of the request, and you control every byte of it.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
Check the solution on the walkthrough page →This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.