#methodology
2 posts.
Writeup 5 min read
Approving a crypto licence on any Google Ads account
The Ads identity agent answered with no cookies and took the customer id out of the request body. Two curl calls, and the account shows an approved restricted certification it never qualified for.
#Security#Google#methodology
Article 2 min read
Read the scope first
Most of the time I lose on a target is lost to my own setup and assumptions, not the target. A short note on the discipline that actually moves findings.
#methodology#bug-bounty