4 ms·

Surely gmail doesn't have something this terrible, right?

• judge2020 8y ago
  There's a blog post titled Into The Borg[0] that states: > There is also a user “legal-discovery@prod.google.com” that has permission “auth.impersonation.impersonateNormalUser” So it exists, but hopefully Google doesn't have the same issues with giving helpdesk employees access to impersonation. 0: https://opnsec.com/2018/07/into-the-borg-ssrf-inside-google-production-network/ https://opnsec.com/2018/07/into-the-borg-ssrf-inside-google-...