Ashish Dhone ./blog

Jul 2, 2026 · 18 min read · 4 views

Blind XSS in Google Analytics Admin Panel — $3,133.70

By Ashish Dhone (@ashketchum) · Bug Bounty Write-up · Google VRP

Ashish Dhone

Ashish Dhone

Offensive Security Researcher

I Planted a Payload Inside Google and Waited. Days Later, It Fired — the bug you submit and then forget about… until you don't


By Ashish Dhone (@ashketchum) · Bug Bounty Write-up · Google VRP

🔒 Subscriber Only

Continue reading for $5/month

Get full access to this post and every future write-up — bug bounty reports, red teaming guides, and offensive security deep-dives.

Supports USD & INR · Cancel anytime

1 reads

⚡ Enjoy this write-up?

Get every post like this — $5/month

Bug bounty reports, red teaming guides, and offensive security write-ups. New content every week. Cancel anytime.

Subscribe now →

Supports in USD & INR · Secure checkout via Dodo Payments

Want personalised guidance?

Book a 1-on-1 strategy call with me — offensive security, red teaming, SOC career path, or breaking into cybersecurity.

Book a session on Topmate →