Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Hack The Box — Reminiscent
════════════════════════
𐀪 Author: Gendis Angel Trinichola
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 10:40:54 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #forensics
Medium
Hack The Box — Reminiscent
This challenge gives us a Windows memory dump and a short incident description about suspicious network traffic from a recruiter’s virtual…
43 views
Daily Writeups
⤷ Title: Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to…
════════════════════════
𐀪 Author: Odunlade Adeola
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 11:24:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #tech_for_beginners #web_development
Medium
Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to…
APIs are like the bridges between different parts of software. They let apps talk to each other, share information, and perform actions…
41 views
Daily Writeups
⤷ Title: I Stopped Hacking Manually and Started Automating (And Why Report Writing is Everything)
════════════════════════
𐀪 Author: Janhvee Laad
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 10:02:58 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #automation #clickjacking #blind_xss #cybersecurity
Medium
I Stopped Hacking Manually and Started Automating (And Why Report Writing is Everything)
​The Day I Embraced Laziness (Automation is Key)
58 views
Daily Writeups
⤷ Title: How a Simple CORS Misconfiguration Put a Finance Platform at Risk
════════════════════════
𐀪 Author: Abdulbar
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:12:22 GMT
════════════════════════
⌗ Tags: #cors #web_security #cybersecurity #ethical_hacking #bug_bounty
Medium
How a Simple CORS Misconfiguration Put a Finance Platform at Risk
🔍 Executive Summary
56 views
Daily Writeups
⤷ Title: Gain Entry to GCP via GitLab Commit : Pwned-Labs Walkthrough
════════════════════════
𐀪 Author: Maverick
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:37:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_computing #gcp #technology #hacking
Medium
Gain Entry to GCP via GitLab Commit : Pwned-Labs Walkthrough
In this pwned lab, access was provided to a GitLab repository. While enumerating the commit history, I identified a hardcoded Google Cloud…
28 views
Daily Writeups
⤷ Title: Scanning Networks
════════════════════════
𐀪 Author: Dante
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:05:15 GMT
════════════════════════
⌗ Tags: #infosec #notes #vapt #enumeration #network
Medium
Scanning Networks
So for this week I went in depth on how to enumerate information's like hosts available, what are the services running and enumerating…
26 views
Daily Writeups
⤷ Title: TryHackMe | Bugged | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 13:25:35 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #command_execution #mqtt_broker #mqtt
Medium
TryHackMe | Bugged | Walkthrough
MQTT (Message Queuing Telemetry Transport)  is a lightweight communication protocol designed for IoT devices that have limited power…
20 views
Daily Writeups
⤷ Title: Passwords — A Cracking Christmas: Day 9 Advent of Cyber 2025 Tryhackme
════════════════════════
𐀪 Author: Bridget
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 13:06:15 GMT
════════════════════════
⌗ Tags: #adventofcyber_4 #passwords #password_cracking #password_security #tryhackme
Medium
Passwords — A Cracking Christmas: Day 9 Advent of Cyber 2025 Tryhackme
Learn how to crack password-based encrypted files.
22 views
Daily Writeups
⤷ Title: YARA Rules — YARA mean one! | Advent of Cyber 2025 Day 13 | Writeup
════════════════════════
𐀪 Author: Debmalya Mondal⚡
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:03:29 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #cybersecurity #advent_of_cyber_2025
Medium
YARA Rules — YARA mean one! | Advent of Cyber 2025 Day 13 | Writeup
Unwrapping the Logic Behind YARA‑Based Malware Detection
21 views
Daily Writeups
⤷ Title: Cloudsek CTF Writeup 2025
════════════════════════
𐀪 Author: popo
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:05:25 GMT
════════════════════════
⌗ Tags: #web_security #ctf_writeup #ethical_hacking #cybersecurity #cloudsek
Medium
Cloudsek CTF Writeup 2025
This CTF consisted of four challenges—one focused on scripting and three based on web exploitation. The write-up below explains how each…
37 views
Daily Writeups
⤷ Title: Why API Testing Is Non-Negotiable in Cybersecurity Services
════════════════════════
𐀪 Author: Beetles IO
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 12:16:11 GMT
════════════════════════
⌗ Tags: #web_api_security #api_security #security_testing #api_security_testing
Medium
Why API Testing Is Non-Negotiable in Cybersecurity Services
APIs are the connective tissue of modern systems they move data, trigger actions, and often expose sensitive business logic.
42 views
Daily Writeups
⤷ Title: Cross-Site Scripting (XSS) Saldırıları ve Korunma Yöntemleri
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 11:53:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_vulnerability #vulnerability #cross_site_scripting #owasp
Medium
Cross-Site Scripting (XSS) Saldırıları ve Korunma Yöntemleri
Reflected, Stored ve DOM-based…
48 views
Daily Writeups
⤷ Title: Why Hackers Love thefuck: The Terminal Weapon You Didn’t Know You Needed
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:41:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #pentesting #linux
Medium
🧠 Why Hackers Love thefuck: The Terminal Weapon You Didn’t Know You Needed
One typo can ruin a scan. One missing sudo can waste 20 minutes. One forgotten flag can kill momentum.
36 views
Daily Writeups
⤷ Title: From {{7+7}} to Root: Achieving RCE via SSTI
════════════════════════
𐀪 Author: Raj Prasad Kuiri
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:10:43 GMT
════════════════════════
⌗ Tags: #security #application_security #bug_bounty #cybersecurity #information_security
Medium
From {{7+7}} to Root: Achieving RCE via SSTI
Hey everyone, in this blog, we will see how to identify RCE via SSTI using manual and automated approaches. So let's begin
30 views
Daily Writeups
⤷ Title: Joern: Your Secret Weapon for Hunting Bugs at Scale
════════════════════════
𐀪 Author: Madushka
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:00:07 GMT
════════════════════════
⌗ Tags: #application_security
Medium
Joern: Your Secret Weapon for Hunting Bugs at Scale
Let’s be honest: auditing a massive codebase for security flaws is often a nightmare. Traditional static analysis tools (SAST) are…
20 views
Daily Writeups
⤷ Title: The Day I Found an Exposed Google Cloud Service Account Key in a Production JS File — And How…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:52:25 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #bug_bounty_tips #bug_bounty #hacking_tools
Medium
🔐 The Day I Found an Exposed Google Cloud Service Account Key in a Production JS File — And How It Landed Me in Philips’ Hall of…
Bug bounty stories usually start with adrenaline, payloads, and dashboards lighting up, right?
15 views
Daily Writeups
⤷ Title: When I Found a Hardcoded Sentry Token in a JS Bundle — And Got the Classic “Already a Known…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:51:47 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #hackerone #bug_bounty_tips #bug_bounty
Medium
🔑 When I Found a Hardcoded Sentry Token in a JS Bundle — And Got the Classic “Already a Known Issue” Reply
If you’re in bug bounty or security research long enough, you eventually run into that reply:
11 views
Daily Writeups
⤷ Title: DC-1 → DC-9: A Full 9-Machine Pentesting Series | Episode 8: DC-9
════════════════════════
𐀪 Author: Shikhar Sinha
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:48:22 GMT
════════════════════════
⌗ Tags: #oscp #ctf #vulnhub #vulnerability #hacking
Medium
DC-1 → DC-9: A Full 9-Machine Pentesting Series | Episode 8: DC-9
[Series Link] :- https://www.vulnhub.com/series/dc,199/
8 views
Daily Writeups
⤷ Title: Padelify CTF Write-up: When WAFs play padel and lose
════════════════════════
𐀪 Author: Telynor
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:36:39 GMT
════════════════════════
⌗ Tags: #hacking #writeup #tryhackme #ctf
Medium
Padelify CTF Write-up: When WAFs play padel and lose
So there I was, ready to tackle another TryHackMe challenge. The target? A padel championship web application called “Padelify”. The…
7 views
Daily Writeups
⤷ Title: Why I Don’t Teach Hacking the “Responsible” Way
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:34:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethics #systems_thinking #digital_literacy #hacking
Medium
Why I Don’t Teach Hacking the “Responsible” Way
The Question That Never Goes Away
11 views
Daily Writeups
⤷ Title: How Hackers Use Kali Linux Against Cloud Servers
════════════════════════
𐀪 Author: Fareed Masood
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:08:33 GMT
════════════════════════
⌗ Tags: #aws #hacking #kali_linux #cloud_computing #devops
Medium
How Hackers Use Kali Linux Against Cloud Servers
And Where Most Attacks Actually Fail
20 views