Exam Labs — CAPIE

← All CAPIE labs

What is an exam lab? A complete, believable product API with 15-25 endpoints and many intentional vulnerabilities spanning the whole syllabus — no labels, no hints, just like the real CAPIE exam. Your job: enumerate the entire attack surface, find every flaw, and capture each CAPIE{} flag as proof.

How to tackle an exam lab

Map first. Enumerate every endpoint, method, parameter, role, and object type before attacking anything. Build the surface map.
Authenticate & profile. Log in with the seeded low-priv account(s); catalog tokens, roles, and what each identity can see.
Sweep breadth-first. Run each methodology in turn (authz matrix, token analysis, input mapping, data-flow diff, recon for old versions) across the whole API.
Go deep & chain. Turn low-severity findings into impact — the exam rewards chains (leak → BOLA → takeover).
Capture & prove. Every finding yields a CAPIE{} flag; record the exact request that produced it for your report.
Manage time. Don't rathole. Note a suspected bug, move on, circle back. Breadth then depth.

Exam APIs

Mobility platform

RideHail

Full ride-hailing API. Find and flag every vulnerability.

/exam-ridehail/

Insurance claims

ClaimGuard

Full insurance-claims API. Find and flag every vulnerability.

/exam-insurance/

Media streaming

StreamRat

Full streaming API. Find and flag every vulnerability.

/exam-streaming/