Rikesh Baniya·Aug 21, 2024Authorization bypass due to cache misconfigurationThis writeup is about one of my favorite findings as it was a very unexpected issue.A response icon21A response icon21
rezauditore·Oct 23, 2024Improper Access Control — Generic: How I Gained Full Control Over an Admin PanelIn a recent report, I came across a Swagger UI that exposed API endpoints, which could have let an attacker take full control of the…A response icon1A response icon1
Anas H Hmaidy·Mar 7, 2024Click, Intercept, Hack: Checkmate on Access Control VulnerabilityA response icon4A response icon4
V3D·Oct 4, 2025Story of $$$$ Bounty: 80k+ Users Data Exposed via Signup FlawHello Hackers, Ram Ram Bhyi Sarya NeA response icon5A response icon5
InInfoSec Write-upsbyAnkit Joshi·May 29, 2023Weird Improper Access Control Bug of $$$Hello , So I am back with another write up . This one is about an Improper access control issue which I have found in a famous website…A response icon2A response icon2
Abdelhameed Ghazy·Oct 12, 2022Broken Access Control leads to full team takeover and privilege escalationHello all,A response icon2A response icon2
MahmoudKroush (xgoon)·Apr 27, 2025Manual Testing for Privilege Escalation and Broken Access Control My (Methodology)بسم الله، والصلاة والسلام على رسول الله الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي…A response icon2A response icon2
mohaned haron·Mar 20, 2025Privilege Escalation Worth $$$ BountyHello everyone, I’ll share how I found an improper access control vulnerability and earned a three-digit bounty. Let’s get started!A response icon1A response icon1
Illoy Scizceneghposter·Dec 21, 2024Payment Bypass Guide for Bug Bounty | 69 case studiesI have been reluctant to test access control issues associated with payments and transactions. They often involve third-party services…A response icon2A response icon2
MOAMEN REZK·Dec 17, 2024🔓 Exploiting Access Control Misconfiguration: Privilege Escalation via Improper PATCH Method…After 8+ hours of analyzing over 10 JavaScript files of a specific website, I successfully discovered a Path that allowed me to bypass…A response icon2A response icon2
nooh zidan·Jun 26, 2025Broken Access Control via Hardcoded Bearer Token in Public JS File 💥بِسْمِ اللَّـهِ الرَّحْمَٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ الْمَبْعُوثِ رَحْمَةً لِلْعَالَمِينَ ﷺA response icon4A response icon4
