PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inside American Express India's Cloud Storage Exposure

hackenproof.com | blog | #bug-bounty | #cloud | #case-study | #cloud-storage | #exposure | #amex
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
Published
Collected

Related coverage

blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · portswigger.net
Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A case study of Burp AT analyzing 66,000 lines of minified JavaScript on a timeboxed engagement, uncovering a path to leak confidential whistleblower reports protected only by brute-forceable codes.
blog · hackerone.com
Tips for Migrating to a New Computer for Programmers
Tips for developers switching machines: keep a dotfiles repository, move working files to cloud storage, and revoke old SSH and GPG keys before generating fresh credentials on the new computer.
blog · hackerone.com
Introduction to Firebase Storage - Part 2
Part two of the Firebase Cloud Storage guide: listing files with listAll(), resolving download URLs into state, and deleting individual files with refFromURL().delete().
blog · hackerone.com
Introduction to Firebase Storage - Part 1
Introduction to Firebase Cloud Storage: how its Google Cloud Storage buckets store user-generated content, plus a first tutorial project for uploading and viewing images.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
Back