Skip to content
appsecwriteups.com

Learning AppSec Through Android & Web Vulnerability Writeups

  • Home
  • 🧑‍💻 Courses
  • Android
  • Web
  • Desktop
  • x86_64
  • Shielded
  • Home
  • 🧑‍💻 Courses
  • Android
  • Web
  • Desktop
  • x86_64
  • Shielded
Top Writeup
Home » Archives for Jivan Magare
About Jivan Magare
Hi, I’m Jivan — a cybersecurity enthusiast deeply committed to protecting digital systems and information in an increasingly connected world. With hands-on experience in web application security, API penetration testing, Android and iOS app security, and thick client application testing, I specialize in identifying vulnerabilities and helping organizations strengthen their digital defenses. My mission is to make the internet a safer place by responsibly disclosing security issues and recommending effective remediation strategies. I'm currently diving deeper into Web 3.0 and iOS development to stay ahead in the ever-evolving tech landscape. 🛠️ Technical Skills Web Technologies & Programming: HTML, CSS, JavaScript, Sass, PHP, MySQL, SQL, C, C++, Java, Bash Scripting, Python (Android & Web Development, iOS with Swift and SwiftUI) Desktop Application Security & Thick Client Application Pentesting : Pentesting of Windows Executables (exe) and Standalone Applications. Operating Systems: Linux, Unix, Windows 🏆 Recognitions My contributions have earned me recognition in the Hall of Fame of several top-tier organizations, including: Apple (8x), Truecaller, Vimeo, Jio, Zoho, BugBase, VWO, NTUC Enterprise, and more — including private programs that remain confidential for security reasons.
ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers
Posted inx86_64

ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers

Posted by By Jivan Magare October 17, 2026
Hello, and welcome to the next topic in our x86-64 Assembly Language series. I'm Jivan, and in this…
Read More
ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall
Posted inx86_64

ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall

Posted by By Jivan Magare October 5, 2026
Hey everyone, in this write-up, I will explain x86-64 assembly language, specifically how to get…
Read More
ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program
Posted inx86_64

ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program

Posted by By Jivan Magare October 3, 2026
Hello, I am Jivan, and in this writeup, you will learn about x86-64 Assembly by…
Read More
ASM[01] — [x86-64] Assembly Language: Environment Setup
Posted inx86_64

ASM[01] — [x86-64] Assembly Language: Environment Setup

Posted by By Jivan Magare October 3, 2026
Hello everyone! This writeup is not about any of my bug bounty findings. This series…
Read More
My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon
Posted inAndroid Desktop Web

My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon

Posted by By Jivan Magare September 29, 2026
Hello everyone! I’m Jivan, and in this post I want to share the application security…
Read More
Posted inWeb

Protected: How I Found Broken Access Control & How You Can Find It Too

Posted by By Jivan Magare September 4, 2026
This content is password protected. To view it please go to the post page and enter the password.
Read More
Posted inWeb

Protected: Why a Critical-Looking Vulnerability Was Downgraded: Exposed SSH Credentials Explained

Posted by By Jivan Magare January 15, 2026
This content is password protected. To view it please go to the post page and enter the password.
Read More
Posted inDesktop

Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach

Posted by By Jivan Magare October 8, 2025
This content is password protected. To view it please go to the post page and enter the password.
Read More
How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty
Posted inWeb

How I Found a Critical Privilege Escalation That Let an Unprivileged User Become Admin and Earn $579 USD Bounty

Posted by By Jivan Magare October 7, 2025
Hi everyone — I’m back with a new writeup. I haven’t published for a few…
Read More
CSRF Account Deletion: How I Turned an “Excluded” Bug Into $87 USD Bounty
Posted inWeb

CSRF Account Deletion: How I Turned an “Excluded” Bug Into $87 USD Bounty

Posted by By Jivan Magare August 13, 2025
My name is Jivan, and in this case study, I will present a detailed analysis…
Read More

Posts pagination

1 2 Next page

Archives

  • October 2026
  • September 2026
  • January 2026
  • October 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025

Recent Comments

  1. Jivan Magare on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues
  2. Hannah Melotto on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues
  3. Jivan Magare on Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
  4. Shubham on Protected: My First Day Pentesting Thick‑Client Apps — Discovered a Critical IDOR in a Desktop Client with a Full Black‑Box Approach
  5. Jivan Magare on How I Found a No Rate Limit Vulnerability on a Login Endpoint, Earned a 100€ Bounty, and My Approach to Testing for No Rate Limit Issues

Recent Posts

  • ASM[04] — [x86-64] Assembly Language: Introduction to GDB Debugging and CPU Registers
  • ASM[03] — [x86-64] Assembly Language: Understanding Instructions, Registers and the read Syscall
  • ASM[02] — [x86-64] Assembly Language: Understanding Registers and Writing Our First Program
  • ASM[01] — [x86-64] Assembly Language: Environment Setup
  • My Application Security Pentesting Setup: Android, iOS, Web, API, Thick Client & Cloud Recon

Categories

  • Android
  • Desktop
  • Web
  • x86_64

🔗Follow Me

  • LinkedIn

💬Contact Us

📩 Have questions, suggestions, or found a security issue? Reach out to us at: contact@appsecwriteups.com

🛡️Privacy Policy

Privacy Policy

Copyright 2026 — appsecwriteups.com. All rights reserved. appsecwriteups.com
Scroll to Top