Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

theguptalog.blogspot.com

Post reply on HN
Print view View original

11–20 of 45 posts

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#11

Post by savolai »

tedk-42 wrote: post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

It's not really fair to criticise hosting choice, but this lead me down a rabbit hole.

Noticed that non-responsive blog layouts are rare these days. Most are from blogspot. So I took a look and realized that blogger nowadays actually supports responsive layouts, but apparently... they are not popular?

https://blogger.googleblog.com/2017/03/share-your-unique-sty...

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#13

Post by Quarrelsome »

tedk-42 wrote: post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

got any more criticisms, font choice, perhaps there's some duplication in their css?

I think 12k could be fine given how much it might have cost them if nobody had noticed.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#14

Post by utf_8x »

tedk-42 wrote: post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

Considering it let them do an unauthorized wire transfer from a system account, 12k seems pretty reasonable.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#15

Post by sam_lowry_ »

stuartjohnson12 wrote: post #8
sammy2255 wrote: post #7

Did you Bypass AWS API Gateway.. or did you bypass it for a company who had their AWS API Gateway misconfigured?

I hate when people say this, as if there's any world in which I would want my AWS API gateway to do this, let alone accidentally. HTTP is littered with these footguns, differences between slashes and no slashes is a classic. A good piece of software would make it hard to do this by accident, and probably should default to having the same behaviour with or without trailing slash. Yes yes, I know, folder/file naming co…

HTTP footguns? Meh! I routinely bypass domain blocks by appending a dot to the domain name, e.g. amazon.com.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#17

Post by treszkai »

tedk-42 wrote: post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

Yes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.
Post reply on HN