The server API in the Anda app relies on hardcoded credentials.Referenceshttps://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html