Found Algolia key in the DOM using my own Chrome extension. It searches the defined keywords in the DOM and JS files. github.com/dirtycoder0124… Exploit the key by following the steps given on hackwithsuryesh.medium.com/algolia-api-ke… #bugbounty #bugbountytips


Escalated algolia key misconfiguration to stored xss.


Congratulations bro, I'm happy for you that my writeup helps you to exploit this.


Thank you for such a nice and easy to understand writeup. Everything is clear and step by step.


congrats bro, hope you remember me🙃


yes google dork man. hehe


Lol, a lot of companies told me to fuck off, we don't care, and closed it as info, so I stopped reporting it.


Did you exploit the key


Wow, that's cool. Add some features from the DotGit plugin to it.


United States Trends
Loading...

Something went wrong.


Something went wrong.