![[Image: 5719024fbbc0abd0357c28597321eff8.jpg]](https://i.pinimg.com/736x/57/19/02/5719024fbbc0abd0357c28597321eff8.jpg)
hey guys I'm selling multiple critical broken access control vulnerability on the Moroccan educational platform Massar (massar.men.gov.ma). This platform manages student data, grades, exam schedules, and more for all Moroccans students, parents, teachers, and admins .....
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
What the exploit does:
- Access to 6 Million Private Records
- Student and parent personal information (full name, age, ID code, facial image, place of origin, address, parents' full names, etc.
- Full read AND delete access.
- Minimal technical knowledge required to exploit.
- Communications between teachers and the government.
- Includes sensitive operational details and troubleshooting info.
Estimated total data size : more than 1 terabyte
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Samples : https://t.me/massar_men_gov_ma_poc
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Contact : https://t.me/L2w038a
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Price : 1 --> 5000 $