How I hacked Google’s bug tracking system itself for $15,600 in bounties

medium.comsite

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲
   How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) medium.com

   site category #web-security link ↗
2. ▲
   The bug bounty program that changed my life 10degres.net

   site category #web-security link ↗
3. ▲
   How I got my first big bounty payout with Tesla medium.com

   site category #web-security link ↗
4. ▲
   How I hacked into Google's internal corporate assets observationsinsecurity.com

   site category #cicd-attacks link ↗

   More ways to find dependencies in code for Dependency Confusion.

5. ▲
   A glimpse into GitHub's Bug Bounty workflow github.blog

   site category #web-security link ↗
6. ▲
   How We Hacked a Software Supply Chain for $50K landh.tech

   site category #cicd-attacks link ↗

   Scraped JavaScript front-end files of the target and used ASTs to identify import/require statements which lead to discovering a public container with NPM credentials.

   

Web Security › Tricks > Others: “Written by @alex.birsan.”