The Proxy That Snitched on Itself

Title: The Proxy That Snitched on Itself

URL Source: https://medium.com/@moatasem20052002/the-proxy-that-snitched-on-itself-1964b68b1aa7?source=rss------cybersecurity-5

Published Time: 2026-06-20T04:55:02Z

Markdown Content:
# The Proxy That Snitched on Itself | by Moatasem bellah Muhammed | Jun, 2026 | Medium

[Sitemap](https://medium.com/sitemap/sitemap.xml)

[Open in app](https://play.google.com/store/apps/details?id=com.medium.reader&referrer=utm_source%3DmobileNavBar&source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

[](https://medium.com/?source=post_page---top_nav_layout_nav-----------------------------------------)

Get app

[Write](https://medium.com/m/signin?operation=register&redirect=https%3A%2F%2Fmedium.com%2Fnew-story&source=---top_nav_layout_nav-----------------------new_post_topnav------------------)

[Search](https://medium.com/search?source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)


# The Proxy That Snitched on Itself

[](https://medium.com/@moatasem20052002?source=post_page---byline--1964b68b1aa7---------------------------------------)

[Moatasem bellah Muhammed](https://medium.com/@moatasem20052002?source=post_page---byline--1964b68b1aa7---------------------------------------)

Follow

6 min read

·

1 hour ago

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fvote%2Fp%2F1964b68b1aa7&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&user=Moatasem+bellah+Muhammed&userId=15e10b4ec0e0&source=---header_actions--1964b68b1aa7---------------------clap_footer------------------)

7

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Frepost%2Fp%2F1964b68b1aa7&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&user=Moatasem+bellah+Muhammed&userId=15e10b4ec0e0&source=---header_actions--1964b68b1aa7---------------------repost_header------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fbookmark%2Fp%2F1964b68b1aa7&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&source=---header_actions--1964b68b1aa7---------------------bookmark_footer------------------)

[Listen](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2Fplans%3Fdimension%3Dpost_audio_button%26postId%3D1964b68b1aa7&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40moatasem20052002%2Fthe-proxy-that-snitched-on-itself-1964b68b1aa7&source=---header_actions--1964b68b1aa7---------------------post_audio_button------------------)

Share

## How a single echoed header turned a default merchant account into admin on an internal Apache Airflow — and handed over the keys to production.

Some of the best bugs aren’t clever. There’s no polyglot payload, no race window measured in milliseconds, no fifteen-step gadget chain. Sometimes a service just _tells you the secret_ — you only have to be paying attention when it does.

This is a writeup of one of those. A production e-commerce platform exposed an internal data-pipeline orchestrator (Apache Airflow) through a public API proxy