Awesome Google VRP Writeups

\writeups: not just writeups*

Follow @gvrp_writeups on Twitter to get new writeups straigt into your feed!

Contributing:

If you know of any writeups/videos not listed in this repository, feel free to open a Pull Request.

To add a new writeup, simply add a new line to writeups.csv:

[YYYY-MM-DD],[bounty],[title],[url],[author-name],[author-url],[type],false,?

Writeups:

2026:

• [Oct 29 - $9,000] The App With No Products* by Nikita Markevich
• [Oct 29 - $1,337] The Debug Filter That Read Masked Apigee Secrets* by Nikita Markevich
• [Oct 15 - $???] Poisoning Rhino, Then Waiting for the Callback* by Nikita Markevich
• [Oct 13 - $250,000] Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain* by Brendan Dolan-Gavitt
• [Oct 12 - $90,000] How I Found a $90,000 Remote Code Execution Vulnerability in Google* by Simon Köck
• [Sep 11 - $97,604.4] Breaking into Google's GFile for $100k* by brutecat
• [Jul 15 - $13,337] Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking* by Mohamed Benchikh
• [Jun 11 - $500,000] Hacking Google with A.I. for $500,000* by brutecat
• [May 27 - $???] Android Lock Screen Bypass via Google Gemini — The Patch That Wasn’t* by Sandiyo Christan
• [May 22 - $148,337] StubZero: $148,337 RCE in Google Cloud Production* by brutecat
• [Apr 02 - $0] Weaponizing NotebookLM: How a Harmless Intent Can Silently Brick Your System Storage* by Sandiyo Christan
• [Mar 31 - $14,337] Hacking Google Support: Leaking millions of customer records* by Michael Dalton
• [Mar 23 - $???] Remote Command Execution in Google Cloud with Single Directory Deletion* by RyotaK
• [Mar 10 - $???] LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities* by Liv Matan
• [Mar 02 - $7,000] Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panel* by Gal Weizman
• [Feb 04 - $???] LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)* by Liv Matan
• [Jan 17 - $???] Privilege Escalation via a Service Account Impersonation Chain* by Jakub Domeracki
• [Jan 14 - $???] A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby* by Natalie Silvanovich (Project Zero)

2025:

• [Dec 08 - $???] GeminiJack: the google gemini zero-click vulnerability leaked gmail, calendar and docs data* by Sasi Levi
• [Nov 10 - $20,000] Hacking Gemini: A Multi-Layered Approach* by Valentino Massaro
• [Oct 23 - $???] CVE-2025-12080 — Intent Abuse in Google Messages for Wear OS for Silent Message Sending* by Gabriele Digregorio (Io_no)
• [Sep 30 - $???] The Trifecta: How Three New Gemini Vulnerabilities in Cloud Assist, Search Model, and Browsing Allowed Private Data Exfiltration* by Liv Matan
• [Aug 31 - $3,133.7] Controlling the Google Assistant via Web Speech API (Awarded $3133.7)* by NDevTK
• [Aug 30 - $3,500] Client-side RCE via CSS Injection in Google Web Designer for Windows* by Bálint Magyar
• [Aug 11 - $500] Exploiting YouTube’s Permission Model : A Privilege Escalation case* by Prakhar0x01 (𝙶𝚑𝚘𝚜𝚝 🇮🇳)
• [Jul 02 - $22,500] XSS in Google IDX Workstation* by sudi
• [Jul 01 - $3,133.7] My first bug in Google Cloud: Command injection in Vertex AI* by Valentino Massaro
• [Jun 27 - $13,340] 1-click Oauth client takeover through henhouse UI* by rand0m_unk0wn
• [Jun 09 - $5,000] Bruteforcing the phone number of any Google user* by brutecat
• [May 22 - $8,500] Client-side RCE via improper URL parsing in Google Web Designer for Windows: CVE-2025-4613* by Bálint Magyar
• [May 17 - $3,133.7] Hunting for Bucket Traversals in Google's Client Libraries* by Jakub Domeracki
• [May 04 - $10,000] Two RCEs in Google Cloud products and Nike Air Max 90s* by Sivanesh Ashok
• [Apr 28 - $???] Google Cloud Account Takeover via URL Parsing Confusion* by Mohamed Benchikh
• [Apr 02 - $11,250] Client-side RCE via symlink following in Google Web Designer for macOS/Linux: CVE-2025-1079* by Bálint Magyar
• [Mar 13 - $20,000] Disclosing YouTube Creator Emails for a $20k Bounty* by brutecat
• [Mar 12 - $???] Security Vulnerability in Google Chat's Absolute Poll Allows Unauthorized Poll Closure* by Ahmed Nasr
• [Feb 12 - $10,000] Leaking the email of any YouTube user for $10,000* by brutecat

2024:

• [Dec 29 - $???] Project IDX Security Notes* by Aeden Murray
• [Dec 09 - $???] Revealing Other Users Gender Even If Set to 'Only You' via Google Chat* by Rohmad Hidayah
• [Dec 04 - $1,337] Breaking Open the Forgotten Vault: How a legacy oversight led to unrestricted code execution in Apigee* by Nikita Markevich
• [Nov 11 - $???] Release-Drafter To google/accompanist Compromise: VRP Writeup* by Adnan Khan
• [Nov 01 - $0] Decoding Google: Converting a Black Box to a White Box* by brutecat
• [Oct 08 - $8,000] Reviving an already patched vulnerability for half a year? The second spring of CVE-2024-0044* by canyie
• [Sep 25 - $4,837] XS-Search on Google Photos* by NDevTK
• [Sep 19 - $3,133.7] Office Editing for Docs Sheets & Slides leak* by NDevTK
• [Sep 19 - $4,133.7] Using YouTube to steal your files* by Lyra Rebane
• [Sep 11 - $???] Sketchy Cheat Sheet - Story of a Cloud Architecture Diagramming Tool gone wrong* by Jakub Domeracki
• [Aug 26 - $500] [[$500] How I was able to give verification badge to any YouTube channel and bypass needed requirements](https://vojtechcekal.medium.com/how-i-was-able-to-give-verification-badge-to-any-youtube-channel-and-bypass-needed-requirements-b88855afe4b7)* by Vojtech Cekal
• [Aug 24 - $1,337] Exploiting Sandbox Escape Vulnerability in Apigee PythonScript Policy* by Nikita Markevich
• [Aug 16 - $1,337] Kicking Off the Apigee Security Series: Discovering Rhino’s Blind Spot* by Nikita Markevich
• [Aug 13 - $???] ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts* by Yaron Avital
• [Aug 04 - $???] How I Got Critical P2 Bug on Google* by Kazi Hashibur Rahman
• [Aug 02 - $1,000] Chromium infra leak* by NDevTK
• [Aug 02 - $???] Supply Chain Attack on Chromium-BiDi and Puppeteer via GitHub Cache Poisoning* by inspector-ambitious
• [Aug 01 - $3,133.7] idx.google.com XSS* by NDevTK
• [Aug 01 - $14,008.7] Android web attack surface* by NDevTK
• [Jul 31 - $???] Escalating Privileges in Google Cloud via Open Groups* by Thomas Elling
• [Jul 26 - $???] Leaking All Users Google Drive Files* by Cameron Vincent
• [Jul 24 - $???] ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions* by Liv Matan
• [Jul 17 - $8,500] Unveiling TE.0 HTTP Request Smuggling: Discovering a Critical Vulnerability in Thousands of Google Cloud Websites* by Paolo Arnolfo
• [Apr 15 - $7,500] An Obscure Actions Workflow Vulnerability in Google’s Flank* by Adnan Khan
• [Mar 23 - $4,133.7] Hacking the Giant: How I Discovered Google’s Vulnerability and Hall of Fame Recognition* by Henry N. Caga
• [Mar 04 - $50,000] We Hacked Google A.I. for $50,000* by Lupin

2023:

• [Nov 14 - $10,000] Uncovering a crazy privilege escalation from Chrome extensions* by Derin Eryilmaz
• [Nov 14 - $???] [Google VRP -[IDOR] Deleted Victim Data & Leaked](https://medium.com/@ggilang1135/google-vrp-idor-deleted-victim-data-leaked-0b3cba8e3f7a)* by Gilang Romadon
• [Nov 02 - $???] ApatchMe - Authenticated Stored XSS Vulnerability in AWS and GCP Apache Airflow Services* by Tenable
• [Oct 19 - $???] Google Cloud Vertex AI - Data Exfiltration Vulnerability Fixed in Generative AI Studio* by Johann Rehberger
• [Sep 18 - $???] How i found an Stored XSS on Google Books* by Sokol Çavdarbasha
• [Sep 11 - $???] GCP CloudSQL Vulnerability Leads to Internal Container Access and Data Exposure* by Ofir Balassiano
• [Aug 18 - $18,833.7] Google Extensions* by NDevTK
• [Jul 22 - $???] Hijacking Cloud CI/CD Systems for Fun and Profit* by Divyanshu
• [Jul 07 - $0] A Journey Into Hacking Google Search Appliance* by DEVCORE
• [Jul 05 - $???] Exploring Eclipse IDE Attack Vectors: Unveiling Google Cloud Tools Plugin Vulnerabilities* by Mo Sakr
• [Jul 03 - $500] Hunting for Nginx Alias Traversals in the wild* by Hakai Offensive Security
• [Jun 30 - $???] Server-side Template Injection Leading to RCE on Google VRP* by mizzleneupane
• [Jun 23 - $1,337] Insecure sandbox on Colaboratory* by NDevTK
• [Jun 21 - $4,133.7] Unveiling a Critical Authentication Bypass Vulnerability in Google Cloud API Gateway* by Securing Bits
• [Jun 11 - $7,500] googlesource.com access_token leak* by NDevTK
• [Jun 09 - $6,000] XSS in GMAIL Dynamic Email (AMP for Email)* by asdqw3
• [Apr 20 - $???] GhostToken – Exploiting GCP application infrastructure to create invisible, unremovable trojan app on Google accounts* by Astrix Security
• [Apr 18 - $???] How Material Security Uncovered a Vulnerability in the Gmail API* by Material Security
• [Apr 13 - $500] Remote Code Execution Vulnerability in Google They Are Not Willing To Fix* by Giraffe Security
• [Mar 31 - $0] Unveiling the Secrets: My Journey of Hacking Google’s OSS* by 7h3h4ckv157
• [Mar 28 - $???] The curl quirk that exposed Burp Suite & Google Chrome* by Paul Mutton
• [Mar 18 - $???] Exploiting aCropalypse: Recovering Truncated PNGs* by David Buchanan
• [Mar 13 - $5,000] The Time I Hacked Google’s Manual Actions Database* by Tom Anthony
• [Mar 11 - $1,837] CCAI XSS* by NDevTK
• [Feb 10 - $500] Information disclosure or GDPR breach? A Google tale…* by Luke Berner
• [Feb 09 - $???] Broken Access Control can create Asset library whereas role access is billing + IDOR | Google Ads* by Gilang Romadon
• [Feb 07 - $0] Google Meet Flaw — Join Any Organisation Call (Not an 0day but still acts as 0day) — Refused by GoogleVRP* by Basavaraj Banakar
• [Feb 05 - $???] I was able to see likes count even though it was hidden by the victim | YouTube App 16.15.35* by R ando
• [Jan 22 - $???] [How i was able to get critical bug on google by get full access on [Google Cloud BI Hackathon]](https://orwaatyat.medium.com/how-i-was-able-to-get-critical-bug-on-google-by-get-full-access-on-google-cloud-bi-hackathon-f779fce29900)* by Orwa Atyat
• [Jan 15 - $3,133.7] [XSS using postMessage in Google Cloud Theia notebooks [Google VRP]](https://blog.geekycat.in/xss-using-postmessage-in-google-cloud-theia-notebooks/)* by Sreeram KL
• [Jan 13 - $3,133.7] [Bypassing authorization in Google Cloud Workstations [Google VRP]](https://blog.stazot.com/ssh-key-injection-google-cloud/)* by Sivanesh Ashok
• [Jan 12 - $6,000] [SSH key injection in Google Cloud Compute Engine [Google VRP]](https://blog.stazot.com/auth-bypass-in-google-cloud-workstations/)* by Sivanesh Ashok
• [Jan 12 - $3,133.7] [Client-Side SSRF to Google Cloud Project Takeover [Google VRP]](https://blog.geekycat.in/client-side-ssrf-to-google-cloud-project-takeover/)* by Sreeram KL
• [Jan 06 - $2,337] Identity-Aware Proxy Misconfiguration- Google Cloud Vulnerability* by Borna Nematzadeh

2022:

• [Dec 26 - $107,500] Turning Google smart speakers into wiretaps for $100k* by Matt Kunze
• [Dec 26 - $20,000] Few bugs in the google cloud shell* by Obmi
• [Nov 30 - $1,337] The space creators can still see the members of the space, even after they have been removed from the space.* by Vivek M
• [Nov 10 - $70,000] Accidental $70k Google Pixel Lock Screen Bypass* by David Schütz
• [Sep 22 - $0] Exploiting Distroless Images* by Daniel Teixeira
• [Sep 16 - $???] Cloning internal Google repos for fun and… info?* by Luke Berner
• [Sep 06 - $3,133.7] IDOR leads to removing members from any Google Chat Space.* by Vivek M
• [Jul 26 - $8,133.7] Google Play and DevSite XSS* by NDevTK
• [Jun 09 - $???] How to download eBooks from Google Play Store without paying for them* by Yess
• [Apr 23 - $1,337] Launching a Supply Chain Counterattack Against Google and OpenSSF* by Alan Cao
• [Mar 25 - $0] Clipboard hazard with Google Sheets* by Imre Rad
• [Mar 19 - $10,000] System environment variables leak on Google Chrome - Microsoft Edge and Opera* by Maciej Pulikowski
• [Mar 08 - $???] Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities* by Unit 42
• [Feb 20 - $3,133.7] Send a Email and get kicked out of Google Groups - A Feature that almost broke Google Groups* by Sriram
• [Feb 06 - $2,674] Auth Bypass in Google Assistant* by David Schütz
• [Feb 06 - $1,337] Auth Bypass in com.google.android.googlequicksearchbox* by David Schütz
• [Feb 02 - $???] How I Was Able To Track You Around The Globe!* by Nikhil Kaushik

2021:

• [Dec 30 - $5,000] Email storage leaking ticket-attachment* by NDevTK
• [Dec 28 - $3,133.7] RCE in Google Cloud Dataflow* by Mike Brancato
• [Dec 25 - $???] How I Saved Christmas For Google!* by Nikhil Kaushik
• [Dec 21 - $5,000] Google Cloud Shell XSS* by NDevTK
• [Dec 05 - $6,267.4] SSRF vulnerability in AppSheet - Google VRP* by David Nechuta
• [Nov 21 - $???] Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over* by Cameron Vincent
• [Nov 17 - $10,401.1] Reacting to myself finding an SSRF vulnerability in Google Cloud* by David Schütz
• [Nov 11 - $1,337] GOOGLE VRP BUG BOUNTY: /etc/environment local variables exfiltrated on Linux Google Earth Pro desktop app* by Omar Espino
• [Oct 24 - $7,500] A 7500$ Google sites IDOR* by r0ckin
• [Oct 18 - $???] The Speckle Umbrella story — part 2* by Imre Rad
• [Oct 14 - $0] GOOGLE VRP N/A: Arbitrary local file read (macOS) via <a> tag and null byte (%00) in Google Earth Pro Desktop app* by Omar Espino
• [Oct 11 - $0] Hacking YouTube With MP4* by Florian Mathieu
• [Oct 08 - $25,401.1] 4 Weird Google VRP Bugs in 40 Minutes - Hacktivity 2021* by David Schütz
• [Sep 28 - $???] Google Extensible Service Proxy v1 - CWE-287 Improper Authentication* by Imre Rad
• [Sep 10 - $1,337] Bypassing GCP Org Policy with Custom Metadata* by Kat Traxler
• [Sep 06 - $4,133.7] 2 CSRF 1 IDOR on Google Marketing Platform* by Apapedulimu
• [Aug 24 - $???] The Nomulus rift* by Imre Rad
• [Aug 23 - $???] Hey Google ! - Delete my Data Properly — #GoogleVRP* by Sriram Kesavan
• [Jul 13 - $???] Unencrypted HTTP Links to Google Scholar in Search* by David Schütz
• [Jul 08 - $0] IDOR on clientauthconfig.googleapis.com* by David Schütz
• [Jun 25 - $???] Google Compute Engine (GCE) VM takeover via DHCP flood* by Imre Rad
• [Jun 16 - $???] Story of Google Hall of Fame and Private program bounty worth $$$$* by Basavaraj Banakar
• [Jun 13 - $3,133.7] Privilege escalation on https://dialogflow.cloud.google.com* by lalka
• [Jun 09 - $500] Author spoofing in Google Colaboratory* by Zohar Shacha
• [May 31 - $10,000] AppCache's forgotten tales* by Luan Herrera
• [May 17 - $???] Clickjacking in Nearby Devices Dashboard* by David Schütz
• [May 16 - $5,000] Auth Bypass in https://nearbydevices-pa.googleapis.com* by David Schütz
• [May 05 - $???] How I Hacked Google App Engine: Anatomy of a Java Bytecode Exploit* by Robert Grosse
• [Apr 29 - $???] De-anonymising Anonymous Animals in Google Workspace* by David Schütz
• [Apr 21 - $???] IDOR leads to how many likes that was hidden | Youtube* by R Ando
• [Apr 20 - $???] Auth Bypass in Google Workspace Real Time Collaboration* by David Schütz
• [Apr 13 - $1,337] Google Photos : Theft of Database & Arbitrary Files Android Vulnerability* by Rahul Kankrale
• [Apr 09 - $31,337] Explaining the exploit to $31,337 Google Cloud blind SSRF* by Bug Bounty Reports Explained
• [Apr 06 - $31,337] $31,337 Google Cloud blind SSRF + HANDS-ON labs* by Bug Bounty Reports Explained
• [Apr 05 - $6,000] [I Built a TV That Plays All of Your Private You