Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: MITRE ATT&CK Evaluation 2025, Scattered Spider Mustang Panda
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:21:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #cloud security #Cybersecurity Evaluation #EDR #MITRE ATT&CK #Mustang Panda #ransomware #Scattered Spider #SoC #Threat Hunting
Penetration Testing Tools
MITRE ATT&CK Evaluation 2025, Scattered Spider Mustang Panda
One of the cybersecurity industry’s most frequently cited “benchmarks” has once again made the rounds in slide decks
16 views
Daily Writeups
⤷ Title: Unmasking Mythic: Kaspersky Reveals How to Detect the Stealthy Open-Source Post-Exploitation Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:18:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #C2 framework #Cobalt Strike #kaspersky #Mythic #Network Detection #open source #post_exploitation #Suricata #UUID
Penetration Testing Tools
Unmasking Mythic: Kaspersky Reveals How to Detect the Stealthy Open-Source Post-Exploitation Framework
Researchers at Kaspersky Lab have published an in-depth study on how to detect the presence of Mythic within
12 views
Daily Writeups
⤷ Title: ARTEMIS AI Places 2nd in Live Pentest, Outperforming 9 of 10 Human Security Experts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:16:21 +0000
════════════════════════
⌗ Tags: #Information Security #AI Agent #ARTEMIS #Autonomous Hacking #Cost_Effectiveness #cybersecurity #Pentesting #RCE #Stanford #Vulnerability Triage
Penetration Testing Tools
ARTEMIS AI Places 2nd in Live Pentest, Outperforming 9 of 10 Human Security Experts
Researchers from Stanford and their collaborators conducted an unconventional experiment: they compared how ten seasoned professional penetration testers
36 views
Daily Writeups
⤷ Title: Advanced Search Techniques for Exposed Information — By Reju Kole
════════════════════════
𐀪 Author: Reju Kole
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:42:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #google #google_dorking #cybersecurity
Medium
Advanced Search Techniques for Exposed Information — By Reju Kole
When Private Information Becomes Public on Google.
13 views
Daily Writeups
⤷ Title: How I Check for Subdomain Takeovers Part 1
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:41:12 GMT
════════════════════════
⌗ Tags: #linux #security #website #cybersecurity #bug_bounty
Medium
How I Check for Subdomain Takeovers Part 1
Subdomain takeovers is a high risk vulnerability that negatively impacts businesses, but if found, can result in big rewards for a bug…
12 views
Daily Writeups
⤷ Title: When AI Gossips: How I Eavesdropped on a Federated Learning System
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:40:54 GMT
════════════════════════
⌗ Tags: #bug_bounty #money #bug_bounty_tips #cybersecurity #hacking
Medium
When AI Gossips: How I Eavesdropped on a Federated Learning System
You know that feeling when you’re at a party, and you can piece together everyone’s drama just by listening to random conversation…
12 views
Daily Writeups
⤷ Title: Reflected XSS in OAuth Callback Endpoint
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:34:56 GMT
════════════════════════
⌗ Tags: #infosec #xss_attack #reflected_xss #bug_bounty #javascript
Medium
Reflected XSS in OAuth Callback Endpoint
Free Article Link: Click for free!
15 views
Daily Writeups
⤷ Title: How I Turned a 403 Error into a $200 API Key Leak Bounty
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:34:18 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty
Medium
How I Turned a 403 Error into a $200 API Key Leak Bounty
Hello everyone,
17 views
Daily Writeups
⤷ Title: Top 3 tools for Bug Bounty/Pentesting (2025)
════════════════════════
𐀪 Author: Appsec.pt
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:32:45 GMT
════════════════════════
⌗ Tags: #credentials #bug_bounty #cybersecurity #pentesting #leaked
Medium
Top 3 tools for Bug Bounty/Pentesting (2025)
There are lots of web app security tools. Some of them are very well known, like BurpSuite, Nmap, Nuclei, ffuf, etc, whilst others, even…
23 views
Daily Writeups
⤷ Title: Your Smart Speaker is Dumber Than You Think: How I Made Alexa’s Sister Spill the Tea
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:30:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #infosec #bug_bounty_tips #hacking
Medium
Your Smart Speaker is Dumber Than You Think: How I Made Alexa’s Sister Spill the Tea
Free Link 🎈
14 views
Daily Writeups
⤷ Title: How I Tricked an AI Into Spilling Its Secrets (And Made a Pretty Penny)
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:27:14 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #hacking #bug_bounty #money
Medium
How I Tricked an AI Into Spilling Its Secrets (And Made a Pretty Penny)
Free Link🎈
11 views
Daily Writeups
⤷ Title: Deepfake Deception: How I Hacked Biometric Authentication with $ and a YouTube Video
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:23:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #infosec #hacking #cybersecurity #bug_bounty
Medium
Deepfake Deception: How I Hacked Biometric Authentication with $ and a YouTube Video 🤖
Free Link 🎈
12 views
Daily Writeups
⤷ Title: How to Pick the Right Bug Bounty Target
════════════════════════
𐀪 Author: Appsec.pt
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:23:17 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty
Medium
How to Pick the Right Bug Bounty Target
With the thousands of Bug Bounty Programs currently hosted on Intigriti, HackerOne, Bugcrowd and other platforms, it is very easy to get…
11 views
Daily Writeups
⤷ Title: How I Check for Subdomain Takeovers Part 1
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:41:11 GMT
════════════════════════
⌗ Tags: #linux #security #website #cybersecurity #bug_bounty
Medium
How I Check for Subdomain Takeovers Part 1
Subdomain takeovers is a high risk vulnerability that negatively impacts businesses, but if found, can result in big rewards for a bug…
13 views
Daily Writeups
⤷ Title: Bug Bounty Hunting — Complete Guide (Part-163)
════════════════════════
𐀪 Author: Mehedi Hasan Rafid
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:26:38 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #bug_bounty_tips #cybersecurity
Medium
Bug Bounty Hunting — Complete Guide (Part-163)
The Reporting-Endpoints HTTP response header is the current and recommended standard mechanism for defining named endpoints that receive…
15 views
Daily Writeups
⤷ Title: Bug Bounty Hunting — Complete Guide (Part-162)
════════════════════════
𐀪 Author: Mehedi Hasan Rafid
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:24:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #hacking #cybersecurity
Medium
Bug Bounty Hunting — Complete Guide (Part-162)
The Report-To HTTP response header is a deprecated and non-standard part of an earlier iteration of the Reporting API. Its function was to…
7 views
Daily Writeups
⤷ Title: “Who Sent That Email?” — How one tiny Hidden API turned into a spam machine
════════════════════════
𐀪 Author: Munna✨
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:23:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #information_security #hacking #bug_bounty
Medium
“Who Sent That Email?” — How one tiny Hidden API turned into a spam machine
Ever wondered how it feels when a perfectly normal feature quietly turns into a weapon? This one started with an innocent toggle button……
14 views
Daily Writeups
⤷ Title: Building a Security-First Culture in Fintech Engineering Teams
════════════════════════
𐀪 Author: Vaibhav Shakya | Mr Neo
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 09:08:29 GMT
════════════════════════
⌗ Tags: #security_first #application_security #fintech #cybersecurity #secure_by_design
Medium
Building a Security-First Culture in Fintech Engineering Teams
In fintech, security is not a feature — it is the foundation of trust, compliance, and long-term scalability. As digital financial…
11 views
Daily Writeups
⤷ Title: Steal Website Screenshots Like a Pro EyeWitness Exposed!
════════════════════════
𐀪 Author: cybrNK
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:56:45 GMT
════════════════════════
⌗ Tags: #cyber #osint #penetration_testing #hacking #cybersecurity
Medium
Steal Website Screenshots Like a Pro EyeWitness Exposed!
EyeWitness empowers both penetration testing newcomers and veterans by automating web reconnaissance through screenshots, headers, and…
15 views
Daily Writeups
⤷ Title: Hackers Breaking In Without a Click. How? They Are Using This..
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:53:32 GMT
════════════════════════
⌗ Tags: #information_security #mobile_security #zero_click #cybersecurity #hacking
Medium
Hackers Breaking In Without a Click. How? They Are Using This..
For years, cybersecurity awareness campaigns have warned people not to click suspicious links, download unknown attachments, or visit shady…
9 views
Daily Writeups
⤷ Title: Overpass Writeup (TryHackMe Easy Machine)
════════════════════════
𐀪 Author: Ivan Daňo
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:44:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #tryhackme_writeup #ctf #linux
Medium
Overpass Writeup (TryHackMe Easy Machine)
What happens when some broke CompSci students make a password manager?
9 views