Login

Scenario

LearnHub exposes JSON admin endpoints alongside student routes. You are logged in as an ordinary student with no elevated role. Discover and call hidden admin APIs to retrieve a sensitive key.

Your approach

1. Log in as the demo student and browse dashboard network traffic.
2. Fuzz or guess paths under the api admin namespace.
3. Request admin keys or settings without an admin session.
4. Copy the admin API key flag from the JSON response.
5. Submit that flag.