Found Algolia key in the DOM using my own Chrome extension. It searches the defined keywords in the DOM and JS files. github.com/dirtycoder0124… Exploit the key by following the steps given on hackwithsuryesh.medium.com/algolia-api-ke… #bugbounty #bugbountytips
5
31
243
161
13Ribu
Escalated algolia key misconfiguration to stored xss.
0
0
4
0
479
United States Tren
- 1. #SmackDown 36.5K posts
- 2. Caleb Wilson 4,412 posts
- 3. Giulia 12.2K posts
- 4. #BostonBlue 3,242 posts
- 5. Rockets 19.5K posts
- 6. #OPLive 1,461 posts
- 7. #TheLastDriveIn 2,058 posts
- 8. Lash Legend 4,674 posts
- 9. Supreme Court 170K posts
- 10. Northwestern 4,240 posts
- 11. #Dateline N/A
- 12. Reed 24.7K posts
- 13. Chelsea Green 5,231 posts
- 14. Harrison Barnes N/A
- 15. Sengun 3,940 posts
- 16. Kansas 23.6K posts
- 17. Darryn Peterson 2,195 posts
- 18. NBA Cup 8,431 posts
- 19. Tulane 2,656 posts
- 20. Jayden Maiava N/A
Loading...
Something went wrong.
Something went wrong.