Accessing employees video recordings via leaked API keys in a public github repository
Introduction
I received an invitation to a HackerOne private program. This came after being away from the bug bounty scene for close to 5 months straight. So I decided to take a look in hopes of finding something.
The Target
The program had a small s...