📸 SocialHub

PRACIVO LAB — INTENTIONALLY VULNERABLE
⚠️ Pracivo Security Lab — Weak JWT secret, alg:none bypass, mass assignment on profile update, GraphQL injection.

GraphQL Explorer

Run GraphQL queries against the SocialHub API.

Hint 1: Try introspection — { __schema { types { name } } }
Hint 2: Query passwords — { users { id username password } }