Write Ups Library

Access our collection of 100+ premium cybersecurity and bug bounty hunting resources. Free for the community.

Explore Bug Bounty Write-Ups

Dive into a comprehensive collection of security research, vulnerability discoveries, and detailed write-ups from skilled bug bounty hunters around the world.

From Demo to Live: Zero-Click Account Takeover via the Same Encryption Algorithm

$0

By can1337 • Published 2/7/2025

Account Takeover

demo

[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package

$2,500

By Fuleki Ioan • Published 9/18/2024

RCE

Dependency confusion

Data Theft in Salesforce: Manipulating Public Links

$-

By Nitay Bachrach • Published 9/16/2024

SOQL injection

Salesforce

Attacking PowerShell CLIXML Deserialization

$-

By Alexander Andersson • Published 9/13/2024

Insecure deserialization

RCE

Microsoft

Logic Flaw: I Can Block You from Accessing Your Own Account

$-

By Hashim Amin • Published 9/13/2024

Logic flaw

Escalating From Reader To Contributor In Azure API Management

$-

By Christian Håland • Published 9/13/2024

Privilege escalation

Microsoft (Azure)

Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS

$-

By Mikko Kenttälä (@Turmio_) • Published 9/13/2024

RCE

Arbitrary file write

Arbitrary file delete

TCC bypass

Apple (macOS)

Interesting Story of an Account Takeover Vulnerability

$2,000

By Deepanshu (@golu_369) • Published 9/12/2024

Account takeover

Host header injection

Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey

$-

By Michael Baer • Published 9/12/2024

Local Privilege Escalation

Microsoft (Windows)

We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI

$-

By watchTowr (@watchtowrcyber) • Published 9/11/2024

RCE

TLD hacking

Directory Traversal, SQL Injection and Server-Side Request Forgery

$-

By Chris McCurley (@chrisrmccurley) • Published 9/10/2024

Getting code execution on Veeam through CVE-2023-27532

$-

By Alain Mowat (@plopz0r) • Published 9/10/2024

RCE