Posted inWeb
Protected: How I Found Broken Access Control & How You Can Find It Too
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
Protected: Why a Critical-Looking Vulnerability Was Downgraded: Exposed SSH Credentials Explained
This content is password protected. To view it please go to the post page and enter the password.
Posted inDesktop
Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty
Hi everyone — I’m back with a new writeup. I haven’t published for a few…
Posted inWeb
CSRF Account Deletion: How I Turned an “Excluded” Bug Into $87 USD Bounty
My name is Jivan, and in this case study, I will present a detailed analysis…
How to Identify and Handle Firebase Security Misconfigurations A Case Study
Hello friends, I'm Jivan, and welcome to my latest write-up focused on Firebase misconfiguration from…
Posted inAndroid
Security Testing via Black-Box Approach: Two Important Android App Issues Discovered Across the Same Company
Hello and welcome to AppSecWriteups.com! I’m Jivan Magare, and in today’s post, I’ll walk you…
Posted inWeb
How I Crafted a Custom CSRF Exploit to Change User Settings and Got Rewarded $50 USD Bounty
Hello guys, I hope you all are doing well. I’m Jivan, and I’m back with…
Posted inWeb
How I Discovered a Google Cloud Storage Bucket Misconfiguration on an Adult Site and Earned a $250 Bounty
Hello friends, I’m Jivan, and I’m back with another write-up about a Google Cloud Storage…
Posted inAndroid
How I Discovered a Critical Vulnerability via Hardcoded GCP Credentials in an Android App and Earned $700 Bounty on Cyberbay
Hello aspiring bug bounty hunters! I’m Jivan, and I’m back with another security vulnerability that…
