Cyber Heist: API Infiltration

A live, interactive API based hacking.
No UI. No forms. Just endpoints.

$ objective

Infiltrate the corporate system by interacting with a real API.
Discover endpoints, bypass authentication, exfiltrate data.

$ reward

Successfully completing the mission may grant you a real LifeTime API access key
usable against ProtonVpn API.

(Keys are limited.)

$ how_to_start

Start a new game session:

curl https://carlostkd.ch/game/api/start

You will receive a game_token.
This token must be included in all future requests.

$ example

curl -H "X-Game-Token: YOUR_TOKEN" \
https://carlostkd.ch/game/api/scan

$ rules