Jul 4, 2026 · 15 min read · 2 views
I Bypassed Microsoft's Enterprise License Check for $7,500
By Ashish Dhone (@ashketchum) · Bug Bounty Writeup · Microsoft M365 Bounty Program
Ashish Dhone
Offensive Security Researcher
How flipping two boolean values in a GraphQL response unlocked full premium access to Microsoft Viva Learning — and what it means for server-side trust
By Ashish Dhone (@ashketchum) · Bug Bounty Writeup · Microsoft M365 Bounty Program
🔒 Subscriber Only
Continue reading for $5/month
Get full access to this post and every future write-up — bug bounty reports, red teaming guides, and offensive security deep-dives.
Supports USD & INR · Cancel anytime
⚡ Enjoy this write-up?
Get every post like this — $5/month
Bug bounty reports, red teaming guides, and offensive security write-ups. New content every week. Cancel anytime.
Subscribe now →Supports in USD & INR · Secure checkout via Dodo Payments
Want personalised guidance?
Book a 1-on-1 strategy call with me — offensive security, red teaming, SOC career path, or breaking into cybersecurity.
Book a session on Topmate →