How One Exposed API Compromised a Hotel Wi-Fi Network | CIG Penetration Test

What happens during a CIG penetration test? In this authorised security demonstration, we uncover an exposed API containing hotel guest names and room numbers, use the exposed information to gain Wi-Fi access, and identify a server-side template injection vulnerability that leads to command execution on the backend server. This demonstration shows how seemingly separate weaknesses can be combined into a serious attack path—and why organisations must test applications before real attackers do. Learn more: https://cig-security.com