Posted inx86_64
ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall
Hey everyone, in this write-up, I will explain x86-64 assembly language, specifically how to get…
![ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall](https://appsecwriteups.com/wp-content/uploads/2026/10/Screenshot-2026-10-05-at-9.59.41-AM-1024x663.png)
![ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program](https://appsecwriteups.com/wp-content/uploads/2026/10/Screenshot-2026-10-03-at-7.13.27-AM-1024x663.png)
Posted inx86_64
ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program
Hello, I am Jivan, and in this writeup, you will learn about x86-64 Assembly by…
![ASM[01] — [x86-64] Assembly Language: Environment Setup](https://appsecwriteups.com/wp-content/uploads/2026/10/additionalMacSetupTools-1024x663.png)
Posted inx86_64
ASM[01] — [x86-64] Assembly Language: Environment Setup
Hello everyone! This writeup is not about any of my bug bounty findings. This series…
My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon
Hello everyone! I’m Jivan, and in this post I want to share the application security…
Posted inWeb
Protected: How I Found Broken Access Control & How You Can Find It Too
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
Protected: Why a Critical-Looking Vulnerability Was Downgraded: Exposed SSH Credentials Explained
This content is password protected. To view it please go to the post page and enter the password.
Posted inDesktop
Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty
Hi everyone — I’m back with a new writeup. I haven’t published for a few…
Posted inWeb
CSRF Account Deletion: How I Turned an “Excluded” Bug Into $87 USD Bounty
My name is Jivan, and in this case study, I will present a detailed analysis…
How to Identify and Handle Firebase Security Misconfigurations A Case Study
Hello friends, I'm Jivan, and welcome to my latest write-up focused on Firebase misconfiguration from…