33 points by henriemategui 17 hours ago|6 comments
•
TobiWestside 15 hours ago
Did you contact the scooter company to report this and give them a chance to improve the security of their admin panel before posting?
With a couple minutes of research, I'm pretty sure I found their website and was able to confirm the painel subdomain still displays a user/password login form. If the admin password is actually trivial to guess (I won't try) I'm pretty sure you won't be the only one visiting their system if the weakness still exists and this post gets some traction.
•
henriemategui 3 hours ago
yeah, i did reach out to them first and told them about it. all they did was change that user's password, and then they just ghosted me
•
_def 15 hours ago
> None of it matches the real company.
oh well don't worry, these companies are basically off the shelf business
•
IshKebab 13 hours ago
Was the hacking done by AI or just the write-up?
•
henriemategui 3 hours ago
both, honestly. i use ai as a copilot while i pentest. it helps a lot with the details and the annoying, tedious stuff. and it helped with the write-up too
•
IshKebab 38 minutes ago
Interesting, did you have to use a Chinese model to get around guard rails?