Giao Hàng Tiết Kiệm
CyStack was engaged by Giao Hang Tiet Kiem (GHTK) to perform a Bounty program, commonly known as a crowdsourced penetration test, on the GHTK applications. The testing was performed from August 23, 2019 to August 22, 2020. The goal of the project is to leverage the power of the expert community to test the application more effectively. Experts have penetrated into the testing environment provided by GHTK and checked all possible vulnerabilities as well as potentially leaking user information in the system.
Overview
| Products | Completion date | Status |
|---|---|---|
| August 22 2020 | Completed |
Total finding
N/AIssues
N/A Resolved
CriticalN/A
HighN/A
MediumN/A
LowN/A
InfoN/A
Assessment Checklist
AI Application Security
Algorithmic Biases
Application-Level Denial-of-Service (DoS)
Automotive Security Misconfiguration
Blockchain Infrastructure Misconfiguration
Broken Access Control (BAC)
Broken Authentication and Session Management
Client-Side Injection
Cross-Site Request Forgery (CSRF)
Cross-Site Scripting (XSS)
Cryptographic Weakness
Data Biases
Decentralized Application Misconfiguration
Developer Biases
External Behavior
Indicators of Compromise
Insecure Data Storage
Insecure Data Transport
Insecure OS/Firmware
Insufficient Security Configurability
Lack of Binary Hardening
Misinterpretation Biases
Mobile Security Misconfiguration
Network Security Misconfiguration
Physical Security Issues
Privacy Concerns
Protocol Specific Misconfiguration
Sensitive Data Exposure
Server Security Misconfiguration
Server-Side Injection
Smart Contract Misconfiguration
Societal Biases
Unvalidated Redirects and Forwards
Using Components with Known Vulnerabilities
Zero Knowledge Security Misconfiguration
Other
Deliverables
Final Report
Completion Certificate
