Skip to content
appsecwriteups.com

Learning AppSec Through Android & Web Vulnerability Writeups

  • Home
  • 🧑‍💻 Courses
  • Android
  • Web
  • Desktop
  • x86_64
  • Shielded
  • Home
  • 🧑‍💻 Courses
  • Android
  • Web
  • Desktop
  • x86_64
  • Shielded
Top Writeup
Home » Archives for October 2025
Posted inDesktop

Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach

Posted by By Jivan Magare October 8, 2025
This content is password protected. To view it please go to the post page and enter the password.
Read More
How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty
Posted inWeb

How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty

Posted by By Jivan Magare October 7, 2025
Hi everyone — I’m back with a new writeup. I haven’t published for a few…
Read More

Archives

  • October 2026
  • September 2026
  • January 2026
  • October 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025

Recent Comments

  1. Jivan Magare on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues
  2. Hannah Melotto on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues
  3. Jivan Magare on Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
  4. Shubham on Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
  5. Jivan Magare on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues

Recent Posts

  • ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers
  • ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall
  • ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program
  • ASM[01] — [x86-64] Assembly Language: Environment Setup
  • My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon

Categories

  • Android
  • Desktop
  • Web
  • x86_64

đź”—Follow Me

  • LinkedIn

đź’¬Contact Us

đź“© Have questions, suggestions, or found a security issue? Reach out to us at: contact@appsecwriteups.com

🛡️Privacy Policy

Privacy Policy

Copyright 2026 — appsecwriteups.com. All rights reserved. appsecwriteups.com
Scroll to Top