## Apprentice Level - βœ… [[1. Exploiting an API endpoint using documentation]] ## Practitioner Level - βœ… [[2. Exploiting server-side parameter pollution in a query string]] - βœ… [[3. Finding and exploiting an unused API endpoint]] - βœ… [[4. Exploiting a mass assignment vulnerability]] ## Expert Level - βœ… [[5. Exploiting server-side parameter pollution in a REST URL]]