https://wearethebug.dev/tags/exposed-api/Recent content on WE ARE THE BUGTradecraften-usSun, 04 Oct 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-touch/Sun, 04 Oct 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-touch/Touch is an Easy-rated Windows machine featuring a kiosk-mode device management application. Initial access stems from improperly secured credentials exposed through the device's API, leading to a restricted user session that requires creative exploitation to break out of its locked-down environment and reach a full shell. Privilege escalation involves abusing misconfigured service permissions and exposed database credentials to escalate to full administrative control.