Cracking the UN Code: How I Exposed a Leaky Google Maps API Key and Entered the Hall of Fame

Introduction

Imagine casually browsing the web, only to stumble upon a major security flaw on a United Nations (UN) website. Seems like the stuff of fiction, right? Well, that’s precisely what happened to me, and today, I’m sharing my exhilarating journey of how I found a “leaked Google Maps API key” on a UN site and ended up in their Hall of Fame. So, buckle up and enjoy this rollercoaster ride of discovery, vulnerability reporting, and recognition!

The Discovery

It …

bug bounty bug-bounty-tips bug-bounty-writeup bugs hall-of-fame