MOMO
CyStack was engaged by MoMo to perform a Bounty program, commonly known as a crowdsourced penetration test, on the MoMo applications. The testing was performed from March 1, 2022 to April 30, 2022. The goal of the project is to leverage the power of the expert community to test the application more effectively. Experts have penetrated into the testing environment provided by MoMo and checked all possible vulnerabilities as well as potentially leaking user information in the system.
Overview
| Products | Completion date | Status |
|---|---|---|
 Managed Bug Bounty | April 30 2022 | Completed |
Total finding
N/AIssuse
N/A Resolved
CriticalN/A
HighN/A
MediumN/A
LowN/A
InfoN/A
Assessment Checklist
Application-Level Denial-of-Service (DoS)
Automotive Security Misconfiguration
Smart Contract Security
Blockchain Protocol Security
Broken Access Control (BAC)
Broken Authentication and Session Management
Broken Cryptography
Client-Side Injection
Cross-Site Request Forgery (CSRF)
Cross-Site Scripting (XSS)
External Behavior
Indicators of Compromise
Insecure Data Storage
Insecure Data Transport
Insecure OS/Firmware
Insufficient Security Configurability
Lack of Binary Hardening
Mobile Security Misconfiguration
Network Security Misconfiguration
Privacy Concerns
Sensitive Data Exposure
Server Security Misconfiguration
Server-Side Injection
Unvalidated Redirects and Forwards
Using Components with Known Vulnerabilities
Deliverables
Final Report
Completion Certificate
You are looking for a similar cybersecurity solution?
CyStack offers top-tier cybersecurity protection for your operations, data, and blockchain. We help you to reduce cyber risks, streamline security processes, and accelerate return on investment for your IT team.
Protect your system,
protect the future of your business
