M Maulana Abdullah – Medium

M Maulana Abdullah

M Maulana Abdullah

From a customer to a ‘system owner’

Who am I ?

4 min readFeb 10, 2024

--

From a customer to a ‘system owner’

--

M Maulana Abdullah

Weirdest API that has been ever found

An API (Applicable Programming Interface) is a service bridge to fulfill what users need based on resources what it has in the backend and…

3 min readNov 13, 2023

--

Weirdest API that has been ever found

--

M Maulana Abdullah

How IDOR could jeopardize digital business

E-commerce business grows significantly in the past few years, there must be some well-known companies in a nation which have a huge amount…

4 min readAug 19, 2023

--

1

How IDOR could jeopardize digital business

--

1

M Maulana Abdullah

How a single quote (‘) may potentially destruct one of a biggest public transportation business

One day I planned to travel to my hometown in East Java, Indonesia, by looking for any possible options of public transportation to reach…

3 min readJul 22, 2023

--

How a single quote (‘) may potentially destruct one of a biggest public transportation business

--

M Maulana Abdullah

How improper OTP implementation could lead to Account Take Over (Part 4)

OTP which acts as a second layer of authentication must be applied in all systems that serves same resources in this context for e.g mobile…

3 min readJun 30, 2023

--

How improper OTP implementation could lead to Account Take Over (Part 4)

--

M Maulana Abdullah

How improper OTP implementation could lead to Account Take Over (Part 3)

Another invalid OTP application is established during password reset flow. OTP is involved to the way user to visit the reset password page…

3 min readJun 12, 2023

--

1

How improper OTP implementation could lead to Account Take Over (Part 3)

--

1

M Maulana Abdullah

How improper OTP implementation could lead to Account Take Over (Part 2)

Previously, sample case related wrong OTP implementation during login process is found caused by two points:

3 min readMay 18, 2023

--

How improper OTP implementation could lead to Account Take Over (Part 2)

--

M Maulana Abdullah

How improper OTP implementation could lead to Account Take Over (Part1)

Login through On-Time Password (OTP) was long time ago introduced as it’s believed can act to augment existing userID and passwords with…

3 min readApr 29, 2023

--

How improper OTP implementation could lead to Account Take Over (Part1)

--

M Maulana Abdullah

How careless default credentials impact to massive account takeover

Have you ever registered on a website (lets call it as redacted.com) which right after, you will get default credentials through email /…

4 min readApr 22, 2023

--

How careless default credentials impact to massive account takeover

--

M Maulana Abdullah

How exploitable sensitive information in API is able to destruct business in disruption era —…

Last but not least while this action can really end the rivalry.

3 min readApr 16, 2023

--

How exploitable sensitive information in API is able to destruct business in disruption era —…

--

M Maulana Abdullah

M Maulana Abdullah

IT enthusiast. Written articles are much more about API development vulnerabilities. Let business owner to understand the issue is my priority.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams