Fictional Learning Platform

Train on realistic API targets inside a polished academy portal.

Rootus Academy is designed like a modern course platform: account creation, student login, course browsing, lesson pages, and API-backed premium content delivery.

1 course 3 lessons REST API challenge

Course Catalog

Browse structured content

Students can authenticate, open the course library, and move into lesson pages.

Subscription Gate

Premium lesson restrictions

One lesson appears premium and is meant to be blocked for free-plan students.

Challenge Flow

Inspect and tamper requests

The frontend behaves normally, but the API trust model is deliberately flawed.