writeups.xyz / Hacking our way into internal DBs with hardcoded authentication keys

Submitter : c2a

Date: 13 February 2023

Bounty : undisclosed

Vulnerabilities :

• JWT
• SSO
• Authentication Bypass
• Security Misconfiguration

Programs :

• Undisclosed

Authors :

• Ophion Security (@OphionSecurity)

Link :
https://ophionsecurity.com/blog/hacking-our-way-into-an-internal-db