Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Pentest Reports That Don’t End Up in the Trash
════════════════════════
𐀪 Author: ZAYN
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 09:57:18 GMT
════════════════════════
⌗ Tags: #information_security #penetration_testing #pentest_report #cybersecurity #writing_pentest_reports
Medium
Pentest Reports That Don’t End Up in the Trash
Dropped a pentest report on a client’s desk last month — 50 pages of findings, clean repro steps, risk scores. Radio silence for two weeks…
27 views
Daily Writeups
⤷ Title: You Got Mail (TryHackMe Room) Writeup
════════════════════════
𐀪 Author: Saiaditya
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 10:52:17 GMT
════════════════════════
⌗ Tags: #phishing #challenge #tryhackme #tryhackme_writeup #phishing_attacks
Medium
You Got Mail (TryHackMe Room) Writeup
Test your recon and phishing skills in order to complete your objective.
32 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Jellyfish Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 10:06:23 GMT
════════════════════════
⌗ Tags: #information_security #pentesting #cybersecurity #tryhackme
Medium
TryHackMe: Year of the Jellyfish Writeup
This box is ranked hard-difficulty on THM, it involves us enumerating subdomains on a webserver, leading to a known RCE vulnerability on…
42 views
Daily Writeups
⤷ Title: Best Udemy Cybersecurity Courses with AI Integration for 2026
════════════════════════
𐀪 Author: Coursespeak
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 10:22:05 GMT
════════════════════════
⌗ Tags: #ai #security #machine_learning #cybersecurity #ethical_hacking
Medium
Best Udemy Cybersecurity Courses with AI Integration for 2026
In the rapidly evolving landscape of digital security, the integration of artificial intelligence (AI) with cybersecurity has become…
55 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: A Browser Extension Risk Guide After the ShadyPanda Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: 16TB of MongoDB Database Exposes 4.3 Billion Lead Gen Records
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:36:45 +0000
════════════════════════
⌗ Tags: #Leaks #Privacy #Security #Business #Cloud Server #Cybersecurity #database #Leads #LEAKS #LinkedIn #MongoDB
Hackread
16TB of MongoDB Database Exposes 4.3 Billion Lead Gen Records
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
❤1
37 views
Daily Writeups
⤷ Title: Hamas Linked Hackers Using AshTag Malware Against Diplomatic Offices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:51:10 +0000
════════════════════════
⌗ Tags: #Malware #Security #Ashen Lepus #AshTag #Cyber Attack #Cyber Espionage #Cybersecurity #Hamas #Middle East #Palestine #Palo Alto Networks
Hackread
Hamas Linked Hackers Using AshTag Malware Against Diplomatic Offices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: $25,000| Critical Vulnerability was Found on HackerOne
════════════════════════
𐀪 Author: KILLUA_UCHIHA
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:17:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_zero #bugs #bug_bounty_writeup
23 views
Daily Writeups
⤷ Title: # Common Web Vulnerabilities Every Developer Should Know
════════════════════════
𐀪 Author: Abdulbar
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:15:14 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #cybersecurity #ethical_hacking #infosec
Medium
# Common Web Vulnerabilities Every Developer Should Know
## 🔍 Introduction
Most successful hacks don’t use advanced techniques. They exploit basic web vulnerabilities that developers often…
17 views
Daily Writeups
⤷ Title: Beginner Bug Bounty Guide
════════════════════════
𐀪 Author: Abdulbar
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:01:24 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #bug_bounty #ethical_hacking #infosec
Medium
Beginner Bug Bounty Guide
## 🚀 Introduction
Bug bounty is one of the easiest ways to enter cybersecurity without a degree.
If you understand how websites work and…
16 views
Daily Writeups
⤷ Title: Negative AddOn to Financial Flaw — Business Logic Vulnerability
════════════════════════
𐀪 Author: Mr. Vrushabh
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:56:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #business_logic_bug #bug_bounty #bug_bounty_writeup
Medium
Negative AddOn to Financial Flaw — Business Logic Vulnerability
My Journey into a Rental Car Service’s Financial Flaw
24 views
Daily Writeups
⤷ Title: Deep Dive: OAuth 2.0 Vulnerabilities & Exploitation Guide
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:33:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development #oauth #bug_bounty_tips #web_security
Medium
Deep Dive: OAuth 2.0 Vulnerabilities & Exploitation Guide
OAuth 2.0 is the industry standard for authorization, allowing users to grant third-party websites and applications access to their…
22 views
Daily Writeups
⤷ Title: CSRF vs JWT: The One Story That Finally Makes It Click
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:16:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty_writeup #bug_bounty #csrf_vs_jwt
Medium
🎭 CSRF vs JWT: The One Story That Finally Makes It Click
Yesterday, we discussed JWT tokens as digital wristbands that identify who you are and what you can do.
 Today, let’s meet their sneaky…
18 views
Daily Writeups
⤷ Title: Bug Bounty Burnout and the Boredom of Repetitive Tasks
════════════════════════
𐀪 Author: Mohsin khan
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:05:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #bug_bounty #bugs #bug_bounty_tips
Medium
Bug Bounty Burnout and the Boredom of Repetitive Tasks
Twitter highlights, leaderboard screenshots, five-figure payouts, and “first critical of the month” posts paint a picture of constant…
16 views
Daily Writeups
⤷ Title: Lab: Referer-based access control
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:10:31 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #ctf #pentesting #ctf_walkthrough
Medium
Lab: Referer-based access control
Bu labda, bazı admin fonksiyonlarına erişimin HTTP Referer header’ına göre kontrol edildiği hatalı bir access control mekanizması…
17 views
Daily Writeups
⤷ Title: Understanding CWE-540: Inclusion of Sensitive Information in Source Code
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:02:24 GMT
════════════════════════
⌗ Tags: #software_development #cwe #cybersecurity #hacking #infosec
Medium
Understanding CWE-540: Inclusion of Sensitive Information in Source Code
Source code is the foundation of every application, containing the logic and algorithms that make software work. When developers embed…
18 views
Daily Writeups
⤷ Title: The SOC Hero Problem
════════════════════════
𐀪 Author: Alexandra Costea
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:53:39 GMT
════════════════════════
⌗ Tags: #infosec_write_ups #security_operation_center #programming #cybersecurity #infosec
Medium
The SOC Hero Problem
How Security Teams Risk Being the Culprit Rather Than the Solution
16 views
Daily Writeups
⤷ Title: How an LLM and One Curious Non-Engineer Eliminated the Last 25 % Mystery of Turbofan Thrust in One…
════════════════════════
𐀪 Author: Berend Watchus
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:27:06 GMT
════════════════════════
⌗ Tags: #research_and_development #reverse_engineering #osint_investigation #infosec #osint
Medium
How an LLM and One Curious Non-Engineer Eliminated the Last 25 % Mystery of Turbofan Thrust in One…
Author: Berend Watchus [Publication for: OSINT Team, online magazine]
19 views
Daily Writeups
⤷ Title: Evasion & Combining Techniques: How Small API Bugs Become Critical Vulnerabilities
════════════════════════
𐀪 Author: Mahmoudelshorpagy
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:11:30 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #cybersecurity #penetration_testing #api #offensive_security
Medium
Evasion & Combining Techniques: How Small API Bugs Become Critical Vulnerabilities
When testing APIs, finding a vulnerability is only the beginning.
25 views
Daily Writeups
⤷ Title: When Attackers Think Like Your Business, Penetration Testing Becomes Essential
════════════════════════
𐀪 Author: CyberNX Technologies Pvt Ltd
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:35:35 GMT
════════════════════════
⌗ Tags: #cybernx #penetration_testing #cybersecurity
Medium
When Attackers Think Like Your Business, Penetration Testing Becomes Essential
The first sign of trouble wasn’t a ransom note or a system outage. It was a routine invoice that didn’t belong.
17 views