writeups.xyz / How i Manage to Get Sensitive Informations via docker image

Submitter : c2a

Date: 18 April 2024

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Hardcoded Credentials

Programs :

• Globe Telecom (Gcash)

Authors :

• Ph.Hitachi

Link :
https://ph-hitachi.medium.com/how-i-hacked-globe-gcash-services-and-manage-to-get-access-on-multiple-databases-including-ssh-9ca781348e8f