case studies

Bypassing admin checks and more – Privilege Escalation case study

July 16, 2024
#78, Case Studies

You are unauthorized to view this page. Login

Request smuggling case study – what more to do other than running existing tools?

March 15, 2024
#72, Case Studies

You are unauthorized to view this page. Login

How to find CSRFs despite SameSite cookies? CSRF Case Study

December 22, 2023
#67, Case Studies

You are unauthorized to view this page. Login

RCE – where to look for them? RCE Case Study

November 2, 2023
#64, Case Studies

You are unauthorized to view this page. Login

How to make money for DoS bugs? DoS case study

September 18, 2023
#61, Case Studies

You are unauthorized to view this page. Login

Account takeover case study + checklist that will help you find them

June 8, 2023
#55, Case Studies

You are unauthorized to view this page. Login

How to maximise payouts for file disclosure bugs? File disclosure case study

April 28, 2023
#52, Case Studies

You are unauthorized to view this page. Login

How to make money with IDORs? IDOR case study

March 15, 2023
#49, Case Studies

You are unauthorized to view this page. Login

SQLi Case Study

February 1, 2023
#46, Case Studies

You are unauthorized to view this page. Login

XSS – case study of 174 reports

December 7, 2022
#43, Case Studies

You are unauthorized to view this page. Login

SSRF – Case study of 124 bug bounty reports

October 25, 2022
#40, Case Studies

You are unauthorized to view this page. Login