Write-ups and methodology
Bug bounty and pentest write-ups from the SkillManager team: how we find a bug, confirm it, and report it.
How I Found My First HackerOne Bounty: a Missing Auth Check Hiding in Plain Sight
A beginner-friendly bug bounty write-up: a broken object-level authorization (BOLA) bug on a real production API, and the question that finds this bug class every time.