08-23-2023, 02:23 AM
"NextGen Technological College" is a big 1st grade - college school that offers online schooling/homeschooling for people that live in the Philippines. They use https://k-12.nextgencollege.education (digitalocean server without cloudflare or any ddos protection, easy target for botnets) as their main dashboard for students, and it's where students answer stuff, submit stuff and etc. The problem with this is that the website has a "Login with google" feature, and the teachers don't let the students use the normal login page, and instead force them to log into a @nextgencollege.org email into their chrome browser and use the "Login with google". They do everything they can to force each students to log into the email on their browser and google automatically syncs browser history and etc with whoever has access to that same account. Sure, you can turn off auto sync in settings but children doesn't know that and even the parents. I'm guessing this is to see if a student is cheating, like for example using ChatGPT, but it's just not cool to spy on pretty much everything that a student does in their browser. They use https://sms.i-grow.solutions/ as their school admin login. It's potentially vulnerable to sqli, as typing '=' gives interesting results in the "Forgot Password?" page.
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Seeking NSFW services | You need therapy, dude.
Ban Reason: Seeking NSFW services | You need therapy, dude.