28 Findings — Education & Gov
Coordinated assessment of multiple college portals and a government site; all issues reported to the owners.
- Status
- Reported to asset owners
- Reported
- 2025
Impact
- Exposed student records and administrative panels reachable without authentication.
- SQL injection and IDOR chains leading to full portal takeover.
- Misconfigured file uploads permitting remote code execution.
Timeline
Recon
Scoped public education and government assets.
Testing
28 findings triaged and severity-rated.
Disclosure
Reports delivered to each institution's IT contact.