OpenAI agents tried to bruteforce a UN website's API fields
- From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS gamePost by Rowan H-J (LinkedIn) · 26 September 2026UNCTAD is the UN Conference on Trade and Development.
- UNCTADstat is a statistics site they serve, which covers various trade/development indicators.
- The website renders data from its API, at unctadstat-api.unctad.org/datamart-api/....
Unverified
- From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS gamePost by Rowan H-J (LinkedIn) · 26 September 2026UNCTAD is the UN Conference on Trade and Development.
- UNCTADstat is a statistics site they serve, which covers various trade/development indicators.
- The website renders data from its API, at unctadstat-api.unctad.org/datamart-api/....
Sources: Swarmcha