Back to directory

WRITEUP #2590

Personal Access Token Disclosure in Asana Desktop Application

ReconInformation disclosureHardcoded credentials

by@_lauritz_(Lauritz Holtmann)

Bounty

6,100

Program

Asana

Published

Jun 18, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://security.lauritz-holtmann.de/advisories/asana-desktop-credential-disclosure/

▸ RELATED WRITEUPS

P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!

ReconInformation disclosure

How I Got Bugs From Google Dorks

ReconInformation disclosure

How I can easily get four P1 at NASA using Simple Google Dorking.

ReconInformation disclosure

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

$1600 Bounty on a Main Domain

ReconSession fixation

Built with ❤️ by Shubham Rawat