Home | Dandy Rafliansyah

About Me
Rewards

2023

April 08, 23

Vulnerability Bank BCA - Soon

March 13, 23

IDOR - Kominfo.go.id Sub [Fixed]

March 06, 23

Parameter Tampering at Pedulilindungi [Fixed]

January 17, 23

SQL Injection - bappenas.go.id Sub [Fixed]

January 13, 23

SQL Injection - Kompas.id API [Fixed]

January 04, 23

SQL Injection - Kompas.com Sub [Fixed]

2022

December 15, 22

Git Exposure leads to AWS S3 Access Key - kompas.com API

December 15, 22

SQL Injection - Domino's Pizza [Hall of Fame 2x]

December 03, 22

No limit Request Mail Send - pizzahut.co.id API

September 06, 22

Information Database Exposure via .git Disclosure - Kemenkumham

June 07, 22

SQL Injection - Bank Bukopin Syariah

2021

September 10, 21

Git Exposure - MNC Play

April 25, 21

Sensitive Data Exposure - Subdomain Web Bank Bukopin

April 13, 21

SQL Injection - Application Korlantas POLRI

March 31, 21

SQL Injection - digibook.id [Fixed]

March 27, 21

SQL Injection - Subdomain telkom.co.id

March 03, 21

Git Exposure - LSP BPJS Kesehatan

February 26, 21

SQL Injection - Subdomain sidomuncul.co.id

February 21, 21

SQL Injection - penugasan.pmi.or.id [Fixed]

February 17, 21

SQL Injection - Subdomain k24klik.com

February 11, 21

SQL Injection - Subdomain indonesiaeximbank.go.id

February 10, 21

SQL Injection - alfatrex.id

February 03, 21

SQL Injection - dominos.co.id Sub [Hall Of Fame]

January 07, 21

SQL Injection - Subdomain tvri.go.id

2020

October 15, 20

SQL Injection - Subdomain mncplay.id

October 02, 20

SQL Injection - Subdomain bumn.go.id

September 29, 20

SQL Injection - Subdomain krl.co.id (Intercept Application Mobile)

August 17, 20

SQL Injection - Application PLN Mobile (Intercept Application Mobile)

July 28, 20

SQL Injection - Subdomain gramedia.com

June 04, 20

SQL Injection - alfamidiku.com

April 26, 20

SQL Injection - Subdomain alfamartku.com

January 13, 20

SQL Injection - Subdomain indomaret.co.id

2019

October 21, 19

SQL Injection - Subdomain dephub.go.id

June 10, 19

SQL Injection - Subdomain pmi.or.id

2018

March 27, 18

SQL Injection - Subdomain kemsos.go.id