Workshop Setup — start here

1 Pick your number → download both files

Select the participant number you were handed — this builds your personal environment (login pre-filled; token fills itself in after login). Download both files now, then you won't need to come back to this page.

I am participant  — select — ⬇ Download my environment ⬇ Download collection

Two files land in your Downloads: workshop-environment-p<NN>.json and workshop-collection.json.

2 Open Hoppscotch

Open the API client in a new tab — steps 3–5 happen in there.

🚀 Open Hoppscotch ↗

3 Import the attack collection

In Hoppscotch left sidebar → Collections → the Import icon → “Aus Hoppscotch importieren” → choose workshop-collection.json (downloaded in step 1) → Importieren.

⚠ No “Import from URL” in this version — use the file. You should then see “API Security Lab — Attack Demo” with 5 scenario folders.

4 Import your environment

This is a different section than the collection — use the Environments tab, and the environment file from step 1 (workshop-environment-p<NN>.json, not the collection file).

Left sidebar → Environments → Import → “Aus Hoppscotch importieren” → choose workshop-environment-p<NN>.json → Importieren. Then make it active: the top-right selector should show “Workshop Lab 2026 — P<your number>”.

5 Log in once — token fills itself in

Open the collection → Scenario 1 — BOLA → run “1. Attacker Login”. A test-script stores your JWT in TOKEN automatically, and “2. Own Vehicle” stores your MY_UUID — no copy-paste needed.