Packets&Profits
Packets&Profits ResearchVulnerability Archive · Case Studies

Offensive Case Studies
& Deep-Dive Reports.

Detailed dissections of high-impact vulnerabilities, reproduction proof-of-concepts, and responsible disclosure logs from real-world bug bounty engagements and controlled offensive labs.

Explore Blog Write-upsView Tool Stack
Upcoming Case Studies
01 // EXPLOIT CHAINSFull-Chain Reports

From Minor Misconfiguration to Account Takeover

Step-by-step dissections of chaining low-severity OAuth state flaws, permissive CORS headers, and SSRF pivots into critical impact.

In Preparation / Triage
02 // BOLA & IDORAuthorization Audits

Multi-Tenant Data Leaks via GraphQL Relay Resolvers

In-depth root cause analysis on bypassing API authorization through global node interfaces and undocumented nested field resolvers.

In Preparation / Triage
03 // METHODOLOGYTriage & Remediation

Responsible Disclosure Logs & Retrospectives

Complete engagement timelines, reproduction steps, communication with security teams, and verified engineering patch analysis.

In Preparation / Triage

Start typing to search the whole site.