999.0.4: The Version Number That Got Me Root Inside a Bank
Reported through the bank’s bug bounty program, triaged as critical, marked valid and rewarded. Every name, host and package in this post is a placeholder, so the commands here won’t reproduce against the real target. I never sent a payload to the bank. I uploaded a file to a public website, went to make coffee, and by the time I came back I had code execution on their build server, root on production containers in three different clouds, and a shell on some poor developer’s Windows laptop. ...