Skip to content

Back to the catalog

レッドエージェントの視点：B2Bプラットフォームのクレジットシステムを壊したたった1つのブール値
wiz.iowriteup

レッドエージェントの視点：B2Bプラットフォームのクレジットシステムを壊したたった1つのブール値

Wiz's autonomous "Red Agent" AI pentester analyzed a B2B data platform's 130MB of frontend JS bundles, extracted 100+ API endpoints, and found an unused boolean flag (e.g. unmaskContactData) referenced in client code but never sent by the normal UI. Replaying a standard free-tier search request with this flag set to true caused the backend to skip credit/tier checks and return fully unmasked business emails and phone numbers for the platform's 600M+ profiles, letting free-tier users bypass the paywall entirely; the vendor fixed the flaw within two hours of disclosure.

TL;DR Wiz's Red Agent AI pentester found a client-controlled boolean flag that let free-tier users bypass a B2B data platform's paywall and pull unmasked contact data for 600M+ profiles.
Open original ↗

Organisations named here

  • Red Agent

Technologies named here

  • B2B platform data API
  • Red Agent
  • Wiz

Techniques named here

  • Frontend JavaScript bundle analysis
  • Baseline measurement and request replay

Threat actors named here

  • Red Agent

Related in AppSec