Assalam o alaikum for muslim brothers, sisters and hello for non muslims, i hope all of you are doing well and learning new things day by day.

i am back with another intresting finding story for increasing my following and for sharing my journey so without wasting any time lets start the main story

FREE LINK https://medium.com/@InsbatArshad/how-i-found-an-exposed-user-database-via-an-unprotected-api-and-how-to-prevent-it-in-a-private-77dd95a1101c?sk=a46bb029e1d56ceac6aac98a70c20b8c

The Discovery: An Open Door to Sensitive Data

During a routine security assessment, Using ffuf I encountered an unauthenticated Django REST API endpoint at api.example.com/user/. To my surprise, it returned:

json { “count”: 150, “results”: [ { “email”: “[email protected]”, “password”: “pbkdf2_sha256$…”, “role”: “superuser” }, … ] }

Over 150 user records — including hashed passwords, emails, and roles — were publicly accessible. This wasn’t just a misconfiguration; it was a goldmine for attackers.

Command i used is

ffuf -u https://exampe.target.com/FUZZ -w /usr/share/wordlists/dirb/common.txt -mc 200,302

FFUF is a powerfull tool and dont forget to test every subdomain with this, sometimes it is boring and time…