K
K
KotKostolom2019-11-05 17:25:02
Google
KotKostolom, 2019-11-05 17:25:02

How can I use someone else's API key from Google Maps?

I am engaged in bounty hunting, many sites have Google maps built in, and there is a vulnerability in the code in the form of an api key that anyone can get.
I do not understand how an attacker can use it for their own purposes.
Upd: there is still a token (xs finally)

Answer the question

In order to leave comments, you need to log in

2 answer(s)
A
Anton Shamanov, 2019-11-05
@SilenceOfWinter

The question contains the answer - the Google Maps API key can be used to display maps on your site. What for? Paid accounts have fewer request frequency limits.

D
Dimonchik, 2019-11-05
@dimonchik2013

the code of the pages can also be obtained by everyone

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question