Information Disclosure Leading to a $$$ Bounty in 30 Minutes

Overview:

This report describes how I discovered an information disclosure vulnerability that earned me a bounty in just 30 minutes.

Steps to Discovery:

1. Collecting Subdomains: I began by gathering subdomains and found one formatted like subdomain.target.com.
2. Viewing Source Code: I viewed the source code by pressing [Ctrl + U].
3. Searching for JavaScript Files: Using [Ctrl + F], I searched for ".js" files to identify any JavaScript files in the source code.
4. Finding Sensitive Endpoints: I discovered an endpoint named config.js, as shown in the image below.
5. Accessing Sensitive Information: Upon opening config.js in a new tab, I found sensitive information such as metadata secrets and the recaptchaSiteKey.

   

Reporting and Response:

I reported this vulnerability, and within five days, the submission status was changed to triaged. On the same day, I received the bounty. Response from Bugcrowd Team.

Tips for Finding Information Disclosure:

1. Always check the source code for interesting endpoints.

I hope this information is helpful to you. Best regards, Secone4all_admin