← All Challenges
Challenge 60 of 66
Schema Leaker
🔴 Elite
Web App
+150 XP
A GraphQL API has introspection enabled in production. Query the schema to discover hidden admin mutations and extract the flag.
Send an introspection query: {__schema{types{name fields{name}}}}
🏆 Challenge Complete!
Know someone who would enjoy this? Challenge them.
Keep going
Make it count.
Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free