vulinder testbed (deliberately vulnerable)
password reset:
https://test.mipllab.com/reset
search
ping
user
find
directory
go
preview
fetch
download
orders
graphql
login