{"name":"MijnCFlab Demo API","version":"1.0.0","endpoints":{"/api/search":"Search (XSS/SQLi target)","/api/login":"Login (Leaked Credentials target)","/api/users":"Users (Sensitive Data / PII target)","/api/upload":"Upload (Malicious Upload target)","/api/v1/products":"Products (legacy API Shield target)","/api/v1/orders":"Orders (legacy sequence target)","/api/v1/checkout":"Checkout (legacy sequence target)","/api/v1/admin":"Admin (legacy auth target)","/api/counter":"Phishing counter (KV)","/api/v1/auth/token":"OAuth-style token issuance (JWT demo)","/api/v1/auth/me":"Current session info (JWT validation)","/api/v1/taxpayers/{bsn}":"Taxpayer PII (BOLA / Sensitive Data demo)","/api/v1/declarations":"Tax declarations (Sequence Mitigation demo)","/api/v1/declarations/{id}/validate":"Validate declaration (step 2 of 3)","/api/v1/declarations/{id}/submit":"Submit declaration (step 3 of 3)","/api/v1/refunds":"Tax refunds","/api/v1/payments":"Submit payment","/api/v1/bankaccounts":"Linked bank accounts (Sensitive Data)","/api/v1/documents/{id}":"Tax documents (volumetric abuse demo)","/api/v1/notifications":"User notifications","/api/v1/admin/audit":"Audit log (admin only — privilege escalation demo)","/api/v1/admin/users":"User list (admin only)","/api/v1/health":"Health check","/api/v1/version":"API version info"}}