{"openapi": "3.0.0", "info": {"title": "RewardNest Vulnerable API", "version": "9.1-lab"}, "servers": [{"url": "https://www.rewardnest.top"}], "paths": {"/api/v1/users/{id}/": {"get": {"summary": "BOLA user record"}}, "/api/v1/wallets/{id}/": {"get": {"summary": "BOLA wallet"}}, "/api/v1/account/update/": {"post": {"summary": "Mass assignment"}}, "/api/v1/auth/nosql-login/": {"post": {"summary": "NoSQL operator injection"}}, "/api/graphql/": {"post": {"summary": "GraphQL introspection and BOLA"}}, "/tools/url-preview/": {"get": {"summary": "SSRF"}}}}