How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files

An unauthenticated endpoint returned a fully scoped Box admin token, exposing a law firm's confidential files to anyone who queried it.