Public research, disclosed vulnerabilities, and the tools we maintain .

When The Gateway Becomes The Doorway: Pre-Auth RCE in API Management

Discover how a decade-old vulnerability class leads to pre-authentication Remote Code Execution (RCE) in an enterprise API management platform. This article details the end-to-end compromise of an API Gateway, from initial subdomain reconnaissance and API fuzzing to achieving an interactive reverse shell via unsafe Java deserialization in unauthenticated cluster sync endpoints.