Unlocking any car from X brand in most of the world

Automated excerpt

Plate -> VIN -> Subscriber GUID -> User Account PII (email) registered on the automaker's identity platform (ForgeRock OpenIDM). The path traversal still didn't get us to the endpoints under /openidm/, thanks to quirks in how OpenIDM handles routing. But these steps let us bypass multi-factor authentication for any user of the automaker's connected car app.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.