{"service":"ethicalhck-ctf-target-server","status":"up","challenges":["/web/chimera-pipeline","/web/edge-shadow-engine","/web/phantom-ledger","/web/sovereign-identity","/web/sqli-login-bypass","/web/web-async-callback-race-authorization","/web/web-blind-sqli-boolean","/web/web-business-logic-negative-quantity","/web/web-cache-key-normalization-mismatch","/web/web-cache-poisoning-header","/web/web-chained-ssrf-key-forge","/web/web-chunked-trailer-smuggle","/web/web-client-validation","/web/web-content-negotiation-downgrade","/web/web-cookie-role","/web/web-cross-request-pollution","/web/web-debug-error-leak","/web/web-deep-prototype-pollution-array-path","/web/web-exposed-config","/web/web-file-download-traversal","/web/web-graphql-batch-oracle","/web/web-graphql-batching-bruteforce","/web/web-graphql-introspection-leak","/web/web-graphql-nested-batch-leak","/web/web-header-inspector","/web/web-hidden-discovery-fuzzing","/web/web-hidden-field-trust","/web/web-http-basic-auth-bypass","/web/web-idor-basic","/web/web-idor-chain","/web/web-impersonator-triple-chain","/web/web-impossible-login-chain","/web/web-insecure-deserialization","/web/web-insecure-direct-object-upload","/web/web-insecure-remember-me","/web/web-jwt-alg-confusion","/web/web-jwt-key-confusion-rs-hs","/web/web-jwt-kid-header-injection","/web/web-jwt-signature-type-confusion","/web/web-mass-assignment","/web/web-missing-csrf","/web/web-multi-service-trust-boundary","/web/web-multi-step-password-reset","/web/web-multi-tenant-isolation-bypass","/web/web-nested-encoding-onion","/web/web-nosql-injection","/web/web-oauth-state-account-linking-confusion","/web/web-open-redirect-login","/web/web-open-redirect","/web/web-parameter-pollution","/web/web-partial-update-field-race","/web/web-path-normalization-bypass","/web/web-predictable-session","/web/web-race-condition-coupon","/web/web-rate-limit-bypass","/web/web-raw-request-normalization-quirk","/web/web-robots-spiders","/web/web-second-order-injection","/web/web-self-healing-vault","/web/web-sensitive-comment","/web/web-signed-request-replay-privilege-escalation","/web/web-ssrf-basic","/web/web-ssti-sandbox-escape","/web/web-timelocked-vault-race","/web/web-timing-oracle-narrow-window","/web/web-timing-username-enumeration","/web/web-unicode-normalization-auth-bypass","/web/web-vault-keeper-finale","/web/web-verb-tampering","/web/web-view-source","/web/web-webhook-ssrf-internal","/web/xss-stored-feedback"]}