A leaked Google OAuth secret let me run code on Google's servers
I Found a $90k Remote Code Execution Vulnerability in Google
While mapping Google's shared OAuth flow, I found a Flask session cookie containing a pickle-serialized OAuth2WebServerFlow object with Google's client_id and client_secret in plaintext. The same secret signed the cookie, so I could forge sessions and feed arbitrary pickles to pickle.loads, achieving unauthenticated RCE. I proved it with time.sleep delays and earned a $90,000 bounty. The key also worked on Firebase, Android, and other DevSite domains.
A public signing key plus this sink is unauthenticated RCE.
- option_greek
how does something like this pass code and design reviews. is this code written by ai (the buggy code). Not only was the key that signs the cookie inside the cookie it self but it's using pickle which even model weights are moved away from. I'm a little flabbergasted at the noob nature of this root cause.
- stonyrubbish
Do you have any advice for aspiring bug-bounty hunters? Do you have some method for being able to find vulnerabilities like this, or lots of past experience?
- EdwardDiego
Bold choice using the noun "I" repeatedly instead of "Claude" - you didn't figure this out, Claude did, and then Claude very obviously wrote the blog post.
Oh, maybe that's why "Claude" was substituted with "I", because Claude wrote this blog post from a first person perspective.
- consumer451
Sorry for the meta, but the discourse in many of the comments is nuts to me.
"Claude did this, not you" - does that mean that humans have no agency at all when they use an LLM? Is that the argument?
Maybe the norm should be to credit the LLM and harness used, like "I used ___ to help me find an RCE", but I can see arguments not to do that in some cases.
edit: The giant thread with this now got flagged, so some users may not see it.
- iJohnDoe
If this were Microsoft, they would have received a coupon for 10% off a Thanksgiving turkey, only redeemable in 2030 and only in the month of March, must be purchased with cash, non-transferrable.