YoKo Kho

Independent | Part Time Bug Hunter | OSCP, CRTO, eWPTXv2, eCPTX | was among the Top 40 Bugcrowd Researchers in 2022 | 2018, (Q3, Q4) 2019, (Q1, Q3, Q4) 2020, (Q1, Q2, Q3, Q4) 2021, and (Q1) 2022 Bugcrowd MVP | https://bugcrowd.com/YoKoKho | https://leanpub.com/bughunting101 - Bug Hunting 101 eBook - (Bahasa Indonesia) Free!

Category: Write-Up

Tokopedia – Unrestricted Deletion to All of People’s Bank Account

In the name of Allah, the Most Gracious, the Most Merciful. I. TL;DR The simplicity in receiving payment from the online sales is certainly a dream...

August 26, 2016

Bug Report / Web Apps / Write-Up

Tokopedia – Converting Content Injection to Reflected Cross Site Scripting via Base64 Encoding

In the name of Allah, the Most Gracious, the Most Merciful. I. ABSTRACT Provision of information for activating a new-registered account is one of the features...

August 26, 2016

Bug Report / Mobile Apps / Write-Up

Insecure Data (Passcode) Storage at Pocket Expense for iOS version <= 4.5.1

In the name of Allah, the Most Gracious, the Most Merciful. I. ABSTRACT In our daily life, many people are often finding some difficulties to manage...

July 25, 2014

Category: Write-Up

Tokopedia – Unrestricted Deletion to All of People’s Bank Account

Tokopedia – Converting Content Injection to Reflected Cross Site Scripting via Base64 Encoding

Insecure Data (Passcode) Storage at Pocket Expense for iOS version <= 4.5.1

Search

Recent Posts

Categories