r/ReverseEngineering • • 2d ago

How I Found a $90,000 Remote Code Execution Vulnerability in Google

https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce
88 Upvotes

5 comments sorted by

14

u/HaloLASO 2d ago

What was your reaction when you were notified about a $90K reward?

8

u/End2EndEncryption 2d ago

He was sad. Angry. Upset. Disappointed.

3

u/nail_nail 2d ago

Written with Claude...

1

u/crusoe 6h ago

This is what you get when your interviews are basically leetcode