Assessment

Question 1

When attacking http://vapi.apisec.ai/vapi/api1, which user and flag combination can you compromise with a BOLA attack?

Solution

• Michel Scott

• api1_d0cd9be2324cc237235b

Question 2

When attacking http://vapi.apisec.ai/vapi/api1, which course is Meredith Palmer enrolled in?

Solution

The Subtle art of not giving a F***

Question 3

When attacking http://vapi.apisec.ai/vapi/api1, what is the user ID of Jim Halpert?

Solution

4