Aung K Min Credential Verification | Cyber Defenders Program

Credential

CyberDefenders Summer Internship 2026

Issuer

Growth Sector CyberDefenders Program

Program Dates

June-August 2026

Issue Date

September 2026

Project Title

Unauthenticated SSRF via Apple Pay Merchant Validation

Sponsor Mentor

Lib13 Inc

Program Director

Gabriel Hanzel-Sello

Sponsor Organization

Lib13

Project Highlight

Discovered, verified, and responsibly disclosed an unauthenticated SSRF vulnerability in a retail storefront's Apple Pay checkout integration (Salesforce Commerce Cloud) through a private bug bounty program — proving impact with two independent out-of-band HTTP interactions, ruling out every common false-positive cause, and reporting inconclusive results honestly rather than overclaiming.

Skills Demonstrated

Penetration Testing Server-Side Request Forgery (SSRF) Bug Bounty Methodology Vulnerability Verification Responsible Disclosure