I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty(theguptalog.blogspot.com)
theguptalog.blogspot.com
I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
https://theguptalog.blogspot.com/2026/04/i-bypassed-aws-api-gateway-auth-with.html
3 comments
Nice, you got paid 12k for a defect that could've cost them millions
This is going to make a lot of DevOps engineers audit their setups today
Sure thing