Projects / security
Bureau of Meteorology disclosure
Found a boolean-based blind SQL injection on bom.gov.au that exposed server data and indirect paths toward remote code execution. Reported through responsible disclosure.
In 2020 I found a boolean-based blind SQL injection on www.bom.gov.au. It allowed data on the server to be read and opened indirect avenues toward remote code execution. It was reported through responsible disclosure.
A full write-up is coming on the blog.