Information Disclosure via API Errors in CTF Challenge

Challenge 2/35 · Reconnaissance & Disclosure. Information disclosure via API errors. Easy · Information Disclosure · 15–20 min. A data export endpoint dumps system diagnostics when it hits an invalid field. Feed it garbage, read the debug output, grab the flag. Spin up the lab: npx create-oss-store my-ctf-lab. See it on the roadmap: https://koadt.github.io/oss-oopssec-store/roadmap#challenge-02. Walkthrough — spoilers, read it once you are stuck: https://koadt.github.io/oss-oopssec-store/posts/information-disclosure-api-error. Star OopsSec Store on GitHub: https://github.com/kOaDT/oss-oopssec-store.