Critbook exposes a GraphQL API with introspection enabled and no authorisation on sensitive queries. Extract the schema and dump user data.
