I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty (theguptalog.blogspot.com)

4 points by GeorgeWoff25 5mo ago ↗ HN

2 comments of 3

[ 2.5 ms ] story [ 17.3 ms ] thread

ofcyes 5mo ago ↗

This is going to make a lot of DevOps engineers audit their setups today

Nice, you got paid 12k for a defect that could've cost them millions