Live data from Hacker News

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

theguptalog.blogspot.com

Post reply on HN

Print view View original

1–4 of 4 posts

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#1

Post by GeorgeWoff25 » Sun, May 24, 2026, 11:18 AM UTC

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
theguptalog.blogspot.com

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#2

Post by ofcyes » Sun, May 24, 2026, 11:39 AM UTC

This is going to make a lot of DevOps engineers audit their setups today

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#3

Post by GeorgeWoff25 » Sun, May 24, 2026, 11:40 AM UTC

ofcyes wrote: post #2

This is going to make a lot of DevOps engineers audit their setups today

Sure thing

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#4

Post by Bansi_Gupta » Sun, May 24, 2026, 1:52 PM UTC

Nice, you got paid 12k for a defect that could've cost them millions

Post reply on HN