Suppose, ex-Google doesn’t count for much these days… smh… simonkoeck.com/writeups/goo...
simonkoeck.comHow I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon KoeckA Flask cookie on developers.google.com was signed with a secret it was also carrying inside itself. Pulling that secret out turned a forged session into code execution across seven Google domains.
0 reposts1 like