< Back ~ Labs ~ 1. Exploiting an API endpoint using documentation ~ 2. Finding and exploiting an unused API endpoint ~ 3. TODO ~ 4. Exploiting server-side parameter pollution in a query string