Financial Services Provider — Azure Function Host Key Exposure
Reported an exposed Azure Function host key on a private financial services target, yielding access to sensitive cloud endpoints. Validated and rewarded on YesWeHack.
RESPONSIBLE DISCLOSURE
Bug Bounty & Responsible Disclosure
Security vulnerabilities reported and validated across bug bounty platforms. Target names are withheld in line with program disclosure rules.
01 Validated Findings
02 How I Work
Scope First
Program rules and scope boundaries are verified before testing; out-of-scope assets are never touched.
Working PoC
Every report ships with a reproducible proof of concept and measured impact — not theory.
Minimal Impact
Issues are probed only far enough to prove them: no data exfiltration, no disruption, no persistence.