Expected Findings
- Reflection service is registered alongside business services.
- `grpcurl -plaintext host list` enumerates internal methods.
- Schemas reveal admin-only RPCs and field shapes.
gRPC Service
gRPC Reflection Enabled
The public gRPC server enables reflection in production, so any caller can list services, methods, and message shapes.
CWE-200CWE-306
Reflection probe
Primary Flows
- Reflection Service & method list
- Service inventory Plain summary
Signals
Server
reflection.Register(grpcServer) // shipped to prod