I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty (theguptalog.blogspot.com)

4 points by GeorgeWoff25 3mo ago ↗ HN

2 comments of 3

[ 3.0 ms ] story [ 22.9 ms ] thread

ofcyes 3mo ago ↗

This is going to make a lot of DevOps engineers audit their setups today

Nice, you got paid 12k for a defect that could've cost them millions