Did you contact the scooter company to report this and give them a chance to improve the security of their admin panel before posting?
With a couple minutes of research, I'm pretty sure I found their website and was able to confirm the painel subdomain still displays a user/password login form. If the admin password is actually trivial to guess (I won't try) I'm pretty sure you won't be the only one visiting their system if the weakness still exists and this post gets some traction.
yeah, i did reach out to them first and told them about it. all they did was change that user's password, and then they just ghosted me
Was the hacking done by AI or just the write-up?
both, honestly. i use ai as a copilot while i pentest. it helps a lot with the details and the annoying, tedious stuff. and it helped with the write-up too
Interesting, did you have to use a Chinese model to get around guard rails?
> None of it matches the real company.
oh well don't worry, these companies are basically off the shelf business