2024

Mar 14

Unrestricted File Upload - *.kemenhub.go.id [NO RESPONS]

2023

Aug 13

SQL Injection - *.kemnaker.go.id [NO RESPONS]

Aug 05

SQL Injection at *.kpk.go.id - Komisi Pemberantasan Korupsi [Fixed]

Apr 08

Parameter Tampering at Bank BCA - webform.bca.co.id [Fixed]

Mar 13

IDOR - kominfo.go.id [Fixed]

Mar 06

Parameter Tampering - Pedulilindungi Application [Fixed]

Jan 17

SQL Injection - Sub bappenas.go.id [Fixed]

Jan 13

Parameter Tampering & IDOR - kompas.id API [Fixed]

Jan 04

SQL Injection - Sub Kompas.com [Fixed]

2022

Dec 15

SQL Injection - Domino's Pizza [Hall of Fame 2x]

Dec 15

Git Exposure leads to AWS S3 Access Key - kompas.com API

Dec 03

No limit Request Mail Send - pizzahut.co.id API

Sep 06

Database Exposure via .git Disclosure - Kemenkumham

Jun 07

SQL Injection - Bank Bukopin Syariah

2021

Sep 10

Git Exposure - MNC Play

Apr 25

Sensitive Data Exposure - Bank Bukopin

Apr 13

SQL Injection - Samsat Digital Korlantas Polri [Fixed]

Mar 31

SQL Injection - digibook.id [Fixed]

Mar 27

SQL Injection - Subdomain telkom.co.id

Mar 03

Git Exposure - LSP BPJS Kesehatan

Feb 27

SQL Injection - Subdomain k24klik.com

Feb 26

SQL Injection - Subdomain sidomuncul.co.id

Feb 21

SQL Injection - penugasan.pmi.or.id [Fixed]

Feb 11

SQL Injection - Sub indonesiaeximbank.go.id

Feb 10

SQL Injection - alfatrex.id

Feb 03

SQL Injection - Sub dominos.co.id [Hall Of Fame]

Jan 07

SQL Injection - Subdomain tvri.go.id

2020

Oct 15

SQL Injection - Subdomain mncplay.id

Oct 02

SQL Injection - Subdomain bumn.go.id

Sep 29

SQL Injection - Subdomain krl.co.id (Intercept Application Mobile)

Aug 17

SQL Injection - PLN Mobile App

Jul 28

SQL Injection - Sub gramedia.com

Jun 04

SQL Injection - alfamidiku.com

Apr 26

SQL Injection - Sub alfamartku.com

Jan 13

SQL Injection - Subdomain indomaret.co.id

2019

Oct 21

SQL Injection - Sub dephub.go.id

Jun 10

SQL Injection - Subdomain pmi.or.id

2018

Mar 27

SQL Injection - Subdomain kemsos.go.id