Posted inWeb
How I Escalated Self-XSS into Medium-Severity XSS by Chaining CSRF and Analyzing CAPTCHA
Hello everyone! In this write-up, I will discuss one of my findings about a Self-Reflected…
![ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers](https://appsecwriteups.com/wp-content/uploads/2026/10/Screenshot-2026-10-17-at-8.55.40-AM-Redactly.pics-redacted-Redactly.pics-redacted-1-1024x741.png)
Posted inx86_64
ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers
Hello, and welcome to the next topic in our x86-64 Assembly Language series. I'm Jivan, and in this…
![ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall](https://appsecwriteups.com/wp-content/uploads/2026/10/Screenshot-2026-10-05-at-9.59.41-AM-1024x663.png)
Posted inx86_64
ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall
Hey everyone, in this write-up, I will explain x86-64 assembly language, specifically how to get…
![ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program](https://appsecwriteups.com/wp-content/uploads/2026/10/Screenshot-2026-10-03-at-7.13.27-AM-1024x663.png)
Posted inx86_64
ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program
Hello, I am Jivan, and in this writeup, you will learn about x86-64 Assembly by…
![ASM[01] — [x86-64] Assembly Language: Environment Setup](https://appsecwriteups.com/wp-content/uploads/2026/10/additionalMacSetupTools-1024x663.png)
Posted inx86_64
ASM[01] — [x86-64] Assembly Language: Environment Setup
Hello everyone! This writeup is not about any of my bug bounty findings. This series…
My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon
Hello everyone! I’m Jivan, and in this post I want to share the application security…
Posted inWeb
Protected: How I Found Broken Access Control & How You Can Find It Too
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
Protected: Why a Critical-Looking Vulnerability Was Downgraded: Exposed SSH Credentials Explained
This content is password protected. To view it please go to the post page and enter the password.
Posted inDesktop
Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
This content is password protected. To view it please go to the post page and enter the password.
Posted inWeb
How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty
Hi everyone — I’m back with a new writeup. I haven’t published for a few…