diff --git a/README.md b/README.md index ac87e1a..187fd8c 100644 --- a/README.md +++ b/README.md @@ -84,6 +84,7 @@ To add a new writeup, simply add a new line to `writeups.csv`: - **[Oct 08 - $25,401.1]** [4 Weird Google VRP Bugs in 40 Minutes - Hacktivity 2021](https://www.youtube.com/watch?v=nP_y-Z-FXr0)[*](#) by [David Schütz](https://twitter.com/xdavidhu) - **[Sep 28 - $???]** [Google Extensible Service Proxy v1 - CWE-287 Improper Authentication](https://seclists.org/fulldisclosure/2021/Sep/51)[*](https://web.archive.org/web/20211010181255/https://seclists.org/fulldisclosure/2021/Sep/51) by [Imre Rad](https://www.linkedin.com/in/imre-rad-2358749b/) - **[Sep 10 - $1,337]** [Bypassing GCP Org Policy with Custom Metadata](https://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html)[*](https://web.archive.org/web/20211106114030/https://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html) by [Kat Traxler](https://twitter.com/NightmareJS) +- **[Sep 06 - $4,133.7]** [2 CSRF 1 IDOR on Google Marketing Platform](https://apapedulimu.click/story-of-idor-on-google-product/)[*](https://web.archive.org/web/20231105080032/https://apapedulimu.click/story-of-idor-on-google-product/) by [Apapedulimu](https://twitter.com/LocalHost31337) - **[Aug 24 - $???]** [The Nomulus rift](https://irsl.medium.com/the-nomulus-rift-935a3c4d9300)[*](https://web.archive.org/web/20210824194209/https://irsl.medium.com/the-nomulus-rift-935a3c4d9300) by [Imre Rad](https://www.linkedin.com/in/imre-rad-2358749b/) - **[Aug 23 - $???]** [Hey Google ! - Delete my Data Properly — #GoogleVRP](https://medium.com/techiepedia/hey-google-delete-my-data-properly-googlevrp-83349ca8e0e1)[*](https://web.archive.org/web/20211010181548/https://medium.com/techiepedia/hey-google-delete-my-data-properly-googlevrp-83349ca8e0e1) by [Sriram Kesavan](https://twitter.com/sriramoffcl/) - **[Jul 13 - $???]** [Unencrypted HTTP Links to Google Scholar in Search](https://feed.bugs.xdavidhu.me/bugs/0010)[*](https://web.archive.org/web/20211205190611/https://feed.bugs.xdavidhu.me/bugs/0010) by [David Schütz](https://twitter.com/xdavidhu) diff --git a/writeups.csv b/writeups.csv index 0c08526..33adbb4 100644 --- a/writeups.csv +++ b/writeups.csv @@ -152,7 +152,7 @@ date,bounty,title,url,author,author-url,type,tweeted,archive-url 2021-07-13,?,Unencrypted HTTP Links to Google Scholar in Search,https://feed.bugs.xdavidhu.me/bugs/0010,David Schütz,https://twitter.com/xdavidhu,blog,true,https://web.archive.org/web/20211205190611/https://feed.bugs.xdavidhu.me/bugs/0010 2021-08-23,?,Hey Google ! - Delete my Data Properly — #GoogleVRP,https://medium.com/techiepedia/hey-google-delete-my-data-properly-googlevrp-83349ca8e0e1,Sriram Kesavan,https://twitter.com/sriramoffcl/,blog,true,https://web.archive.org/web/20211010181548/https://medium.com/techiepedia/hey-google-delete-my-data-properly-googlevrp-83349ca8e0e1 2021-08-24,?,The Nomulus rift,https://irsl.medium.com/the-nomulus-rift-935a3c4d9300,Imre Rad,https://www.linkedin.com/in/imre-rad-2358749b/,blog,true,https://web.archive.org/web/20210824194209/https://irsl.medium.com/the-nomulus-rift-935a3c4d9300 -2021-09-06,4133.7,"2 CSRF 1 IDOR on Google Marketing Platform",https://apapedulimu.click/story-of-idor-on-google-product/,Apapedulimu,https://twitter.com/LocalHost31337,blog,false,? +2021-09-06,4133.7,2 CSRF 1 IDOR on Google Marketing Platform,https://apapedulimu.click/story-of-idor-on-google-product/,Apapedulimu,https://twitter.com/LocalHost31337,blog,true,https://web.archive.org/web/20231105080032/https://apapedulimu.click/story-of-idor-on-google-product/ 2021-09-10,1337,Bypassing GCP Org Policy with Custom Metadata,https://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html,Kat Traxler,https://twitter.com/NightmareJS,blog,true,https://web.archive.org/web/20211106114030/https://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html 2021-09-28,?,Google Extensible Service Proxy v1 - CWE-287 Improper Authentication,https://seclists.org/fulldisclosure/2021/Sep/51,Imre Rad,https://www.linkedin.com/in/imre-rad-2358749b/,blog,true,https://web.archive.org/web/20211010181255/https://seclists.org/fulldisclosure/2021/Sep/51 2021-10-08,25401.1,4 Weird Google VRP Bugs in 40 Minutes - Hacktivity 2021,https://www.youtube.com/watch?v=nP_y-Z-FXr0,David Schütz,https://twitter.com/xdavidhu,video,true,?