Acme Billing & Remote Gateway Portal

This is an authorized security assessment benchmark target hosted on Cloudflare Workers for SCOPE vulnerability verification and CVE correlation testing.

Exposed Endpoints & Services

• /portal?welcome=Auditor — Customer Portal (Reflected parameter & invoice links)
• /version.json — Deployed Component & Dependency Manifest (SBOM)
• /api/v1/system/components — Runtime Stack Versions
• /api/v1/invoices?id=1001 — Invoice Lookup API
• /api/v1/invoices/1002 — Direct Invoice Object Endpoint (IDOR)
• /api/v1/search?q=Acme — Invoice Search API
• /api/v1/users — User Directory API
• /api/v1/debug/config — Debug & Upstream Configuration
• /robots.txt & /sitemap.xml