← All Challenges
Challenge 60 of 66
Schema Leaker
🔴 Elite
Web App
+150 XP
A GraphQL API has introspection enabled in production. Query the schema to discover hidden admin mutations and extract the flag.
Send an introspection query: {__schema{types{name fields{name}}}}