Temukan Celah LFI di Server Google, Bug Hunter ini Dapatkan Reward 13.337 USD

-

Temukan Celah LFI di Server Google, Bug Hunter ini Dapatkan Reward 13.337 USD. Cerita sukses dari para bug hunter kadang bisa menjadi inspirasi. Kali ini, seorang bug hunter menemukan celah LFI di production server milik Google dan mendapatkan imbalan sebesar 13.337 US Dollar atau sekitar 191.706.038 IDR (berdasarkan kurs saat artikel ini dibuat).

Melalui postingan di blognya, seorang bug hunter bernama Omar Espino (omespino) menceritakan pengalaman bagaimana ia menemukan celah LFI di server milik Google. LFI atau Local File Inclusion adalah sebuah bug pada site dimana kita bisa mengakses semua file di dalam server hanya dengan melalui URL.

Bug critical tersebut dia temukan di subdomain SPRINGBOARD.GOOGLE.COM. Awalnya dia menemukan celah bypass auth namun saat bug tersebut dilaporkan melalui program Google Vulnerability Reward, bug tersebut belum memenuhi kriteria untuk mendapatkan reward.

 

 

 

 

Dia mencoba untuk menngeskalasi bug LFI yang dia temukan menjadi bug RCE, namun sayangnya gagal karena dia tidak berhasil membaca file /proc/*/fd, ssh keys, server keys ataupun log.

Report Timeline

  • Mar 22, 2019: Sent the report to Google VRP (Just the bypass auth part)
  • Mar 22, 2019: Got a message from google that the bug was triaged
  • Mar 25, 2019: Bug Accepted
  • Mar 25, 2019: Reply about that the bug was in revision in Google VRP panel
  • Mar 30, 2019: I found the LFI and sent the new POC in the same report
  • Apr 1, 2019: Got a message saying that they going to fill a another bug with this LFI information
  • Apr 4, 2019: Got a message saying that the first bug wasn’t elegible for financial reward
  • Apr 17 ,2019: Since the everything was happening in the same report and the bugs were fixed, I asked to the team if the 2 bugs wasn’t elegibles or what happened
  • Apr 23, 2019: Got a message saying that sorry about the confusion and I just had to wait to a new reward decision for the LFI part.
  • May 21 2019: $13,337 bounty and permission to publish this write up received

 

Komentar

Posting Komentar

Postingan populer dari blog ini

OWASP Top 10 Security Risks and Vulnerabilities

-
Gambar
       About 90% of applications have serious vulnerabilities. OWASP, which regularly analyzes    weaknesses and attacks on Web applications, has compiled OWASP TOP-10 - the list of the   most dangerous vulnerabilities. What Is OWASP Top 10 Vulnerability List? OWASP Top 10 is one of the organization's best-known projects. OWASP Top 10 is a ranking of the ten most dangerous information security risks for web applications, compiled by a community of industry experts. For each point of the rating, the risk is calculated by experts based on the OWASP Risk Rating Methodology and includes an assessment of Weakness Prevalence, Weakness Detectability and Exploitability, as well as the criticality of the consequences of their operation or Technical Impacts. For obvious reasons, risk severity assessments do not take into account the business consequences of their implementation. Where possible, the names of the risks in the rating correspond to the names of the similar vulnerab
Baca selengkapnya