QuoVadis Posted May 27, 2018 Report Posted May 27, 2018 TL;DR In early 2018 I got access to a non-production Google App Engine deployment environment, where I could use internal APIs and it was considered as Remote Code Execution due to the way Google works. Thanks to this I got a reward of $36,337 as part of Google Vulnerability Rewards Program Articol complet: https://sites.google.com/site/testsitehacking/-36k-google-app-engine-rce 1 Quote