Passman

Personal Rating: Medium

We have a website. Unfortunately, most of my notes are missing for this one.

We can send a POST request to an API endpoint to a graphql database in the backend:

POST /graphql HTTP/1.1
Host: 46.101.95.78:30933
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://46.101.95.78:30933/dashboard
Content-Type: application/json
Content-Length: 84
Origin: http://46.101.95.78:30933
Connection: close
Cookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6InVuYW1lIiwiaXNfYWRtaW4iOjAsImlhdCI6MTY3OTI0MjU5NH0.sVMYGmRfPuxsjZfrf4d49yjWggy1UJzVqTImDi-szlo

{"query":"{ getPhraseList { id, owner, type, address, username, password*, note } }"}