Remotely unlocking electric scooters

TobiWestside a day ago | parent | next [-]

Did you contact the scooter company to report this and give them a chance to improve the security of their admin panel before posting? With a couple minutes of research, I'm pretty sure I found their website and was able to confirm the painel subdomain still displays a user/password login form. If the admin password is actually trivial to guess (I won't try) I'm pretty sure you won't be the only one visiting their system if the weakness still exists and this post gets some traction.

	▲	henriemategui a day ago \| parent [-]
		yeah, i did reach out to them first and told them about it. all they did was change that user's password, and then they just ghosted me

▲

a day ago | parent | prev | next [-]

[deleted]

▲

_def a day ago | parent | prev | next [-]

> None of it matches the real company.

oh well don't worry, these companies are basically off the shelf business

▲

IshKebab a day ago | parent | prev | next [-]

Was the hacking done by AI or just the write-up?

▲

henriemategui 21 hours ago | parent [-]

both, honestly. i use ai as a copilot while i pentest. it helps a lot with the details and the annoying, tedious stuff. and it helped with the write-up too

	▲	IshKebab 20 hours ago \| parent [-]
		Interesting, did you have to use a Chinese model to get around guard rails?

▲

10 hours ago | parent | prev | next [-]

[deleted]

▲

mr_madmax 10 hours ago | parent | prev [-]

[dead]