Status endpoint
A status API answers differently to verbs, parameters and headers. No single edit is enough here — read each answer, change one knob at a time in Repeater, and combine all three until it opens.
Step 1 — send a plain GET to the endpoint
GET ?api=statusStep 2 — a form that POSTs nothing useful
Every response above carries a hint. Apply it in
Repeater — method, body parameter, header — until the answer turns green.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
Check the solution on the walkthrough page →This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.