I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty (opens in new tab)

(theguptalog.blogspot.com)

4 pointsGeorgeWoff251mo ago3 comments

3 comments

3 comments · 2 top-level

ofcyes1mo ago· 1 in thread

This is going to make a lot of DevOps engineers audit their setups today

Sure thing

Nice, you got paid 12k for a defect that could've cost them millions

j / k navigate · click thread line to collapse