After discovering 896 exposed ID cards in Part 1, I investigated the same vendor's in-house network platform at University X. What I found was far worse: 80,053 accounts, staff passwords in the API...

This report documents a security research investigation into the web application of the Testing Center at University X. Through reverse engineering a Vietnamese JavaScript framework, I identified u...