News for hackers. Stuff that matters.

A comment on How I hacked the StaySafe program, the government Covid-19 tracker of Sri Lanka.

Re:How I hacked the StaySafe program, the government Covid-1... by p410n3 on Monday November 16, 2020 @08:08AM (#25111150)
Great Article! I just shared that with a group of people that are primarily not Hackers but web devs. This is a perfect example that quite often, hacking is just debugging.

I always like these trivial vulnerabilities too. Reading about IDORs is always fun

[ Parent | on HN ]
Re:How I hacked the StaySafe program, the government Covid-1... by _vghb on Monday November 16, 2020 @09:18AM (#25111880)
OP here - Thank you very much.

Yes it was a simple debugging everything done with the browser and with some code review :)

[ Parent | on HN ]
Re:How I hacked the StaySafe program, the government Covid-1... by p410n3 on Monday November 16, 2020 @10:02AM (#25112443)
Which makes it much more interesting to me personally.
[ Parent | on HN ]
Re:How I hacked the StaySafe program, the government Covid-1... by _vghb on Monday November 16, 2020 @10:10AM (#25112578)
A simple cookie token or session token is all what it needed for a quick fix
[ Parent | on HN ]