Get the latest tech news

How I pwned a major New Zealand service provider

Note: The name of local company asked very politely to have their name redacted so it has been replaced with KiwiServices as suggested by ChatGPT Pwning a major New Zealand service provider On the evening of the 19th February 2025 I had an itch, an itch to do good in the world and to continue to polish my pen testing skills. First I went through a list of trending apps on the Google Play Store, and looked for an “‘semi” popular app in New Zealand.

Note: The name of local company asked very politely to have their name redacted so it has been replaced with KiwiServices as suggested by ChatGPT My next thought was that what if the request was timing out because it was trying to do a computationally heavy task such as gathering multiple users details and send it to me. After maybe 30 minutes a big wig called me back and I ended up sending them a vulnerability report via email including replication steps.

Get the Android app