Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Deep Dive: OAuth 2.0 Vulnerabilities & Exploitation Guide
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:33:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development #oauth #bug_bounty_tips #web_security
Medium
Deep Dive: OAuth 2.0 Vulnerabilities & Exploitation Guide
OAuth 2.0 is the industry standard for authorization, allowing users to grant third-party websites and applications access to their…
22 views
Daily Writeups
⤷ Title: CSRF vs JWT: The One Story That Finally Makes It Click
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:16:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty_writeup #bug_bounty #csrf_vs_jwt
Medium
🎭 CSRF vs JWT: The One Story That Finally Makes It Click
Yesterday, we discussed JWT tokens as digital wristbands that identify who you are and what you can do.
 Today, let’s meet their sneaky…
18 views
Daily Writeups
⤷ Title: Bug Bounty Burnout and the Boredom of Repetitive Tasks
════════════════════════
𐀪 Author: Mohsin khan
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:05:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #bug_bounty #bugs #bug_bounty_tips
Medium
Bug Bounty Burnout and the Boredom of Repetitive Tasks
Twitter highlights, leaderboard screenshots, five-figure payouts, and “first critical of the month” posts paint a picture of constant…
16 views
Daily Writeups
⤷ Title: Lab: Referer-based access control
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:10:31 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #ctf #pentesting #ctf_walkthrough
Medium
Lab: Referer-based access control
Bu labda, bazı admin fonksiyonlarına erişimin HTTP Referer header’ına göre kontrol edildiği hatalı bir access control mekanizması…
17 views
Daily Writeups
⤷ Title: Understanding CWE-540: Inclusion of Sensitive Information in Source Code
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:02:24 GMT
════════════════════════
⌗ Tags: #software_development #cwe #cybersecurity #hacking #infosec
Medium
Understanding CWE-540: Inclusion of Sensitive Information in Source Code
Source code is the foundation of every application, containing the logic and algorithms that make software work. When developers embed…
18 views
Daily Writeups
⤷ Title: The SOC Hero Problem
════════════════════════
𐀪 Author: Alexandra Costea
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:53:39 GMT
════════════════════════
⌗ Tags: #infosec_write_ups #security_operation_center #programming #cybersecurity #infosec
Medium
The SOC Hero Problem
How Security Teams Risk Being the Culprit Rather Than the Solution
16 views
Daily Writeups
⤷ Title: How an LLM and One Curious Non-Engineer Eliminated the Last 25 % Mystery of Turbofan Thrust in One…
════════════════════════
𐀪 Author: Berend Watchus
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:27:06 GMT
════════════════════════
⌗ Tags: #research_and_development #reverse_engineering #osint_investigation #infosec #osint
Medium
How an LLM and One Curious Non-Engineer Eliminated the Last 25 % Mystery of Turbofan Thrust in One…
Author: Berend Watchus [Publication for: OSINT Team, online magazine]
19 views
Daily Writeups
⤷ Title: Evasion & Combining Techniques: How Small API Bugs Become Critical Vulnerabilities
════════════════════════
𐀪 Author: Mahmoudelshorpagy
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 13:11:30 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #cybersecurity #penetration_testing #api #offensive_security
Medium
Evasion & Combining Techniques: How Small API Bugs Become Critical Vulnerabilities
When testing APIs, finding a vulnerability is only the beginning.
25 views
Daily Writeups
⤷ Title: When Attackers Think Like Your Business, Penetration Testing Becomes Essential
════════════════════════
𐀪 Author: CyberNX Technologies Pvt Ltd
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:35:35 GMT
════════════════════════
⌗ Tags: #cybernx #penetration_testing #cybersecurity
Medium
When Attackers Think Like Your Business, Penetration Testing Becomes Essential
The first sign of trouble wasn’t a ransom note or a system outage. It was a routine invoice that didn’t belong.
17 views
Daily Writeups
⤷ Title: TryHackMe | Windows Logging for SOC Walkthrough
════════════════════════
𐀪 Author: Birdv
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:27:44 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #cybersecurity #tryhackme_walkthrough
Medium
TryHackMe | Windows Logging for SOC Walkthrough
Hey blue teamers. Let us go through TryHackMe Windows Logging for SOC room.
32 views
Daily Writeups
⤷ Title: Modat Magnify Cyber Dorking
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:59:16 GMT
════════════════════════
⌗ Tags: #cyber #iot_security #ethical_hacking #pentesting #dorking
Medium
Modat Magnify Cyber Dorking
Goldmine for IOT Hackers 🌐
32 views
Daily Writeups
⤷ Title: API1:2023 — Broken Object Level Authorization
════════════════════════
𐀪 Author: Apifort
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:39:22 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #bola #owasp_api_security_top_10 #apifort
Medium
🔐API1:2023 — Broken Object Level Authorization
API’ler modern yazılım mimarilerinin merkezinde yer alır. Mikroservis yapıları, mobil uygulamalar ve üçüncü taraf entegrasyonlar sayesinde…
40 views
Daily Writeups
⤷ Title: Uncovering a Critical Vulnerability: From Unrestricted File Upload to Full System Compromise
════════════════════════
𐀪 Author: Muhammad Sameer
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 12:47:23 GMT
════════════════════════
⌗ Tags: #vapt #pentesting #soap_api #rce
Medium
Uncovering a Critical Vulnerability: From Unrestricted File Upload to Full System Compromise
The Discovery: A Forgotten Upload Endpoint
56 views
Daily Writeups
⤷ Title: FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 20:02:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 20:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: A Hacker’s Christmas: Bug Bounties by Candlelight
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 15:54:24 GMT
════════════════════════
⌗ Tags: #ctf #bug_bounty #christmas #cybersecurity #ethical_hacking
Medium
🎄 A Hacker’s Christmas: Bug Bounties by Candlelight 🎄
While the world sleeps under tinsel and cheer,
We grep through endpoints, one eye on the year.
Firewalls whisper, logs softly confess…
27 views
Daily Writeups
⤷ Title: Recon Dorking: The Art of Advanced Information Gathering for Cybersecurity
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 15:40:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #security_research #ethical_hacking #bug_bounty
Medium
Recon Dorking: The Art of Advanced Information Gathering for Cybersecurity
Subtitle: 50+ Techniques and Tools That Separate Amateurs from Professionals in Reconnaissance
15 views
Daily Writeups
⤷ Title: A Comprehensive Guide to Hacking, Virtual Machines, Linux, and Networking
════════════════════════
𐀪 Author: Ajojose
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 15:53:21 GMT
════════════════════════
⌗ Tags: #beginners_guide #cybersecurity #hacking #computer_science #linux
Medium
A Comprehensive Guide to Hacking, Virtual Machines, Linux, and Networking
In today’s digital world, understanding cybersecurity, system administration, and networking fundamentals is essential for any IT…
15 views
Daily Writeups
⤷ Title: Nine Months In Cyber: From “What’s an API?” to Real‑World Wins
════════════════════════
𐀪 Author: mikesploit
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:46:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #ai #tryhackme
Medium
Nine Months In Cyber: From “What’s an API?” to Real‑World Wins
The holiday season got busy enough that keeping up with Advent of Cyber 2025 just was not realistic, and honestly, that’s not a bad sign…
18 views
Daily Writeups
⤷ Title: FINAL WEEK ! — Call for Speakers for “VulnCon 2026” Closes on December 22, 2025
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:40:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_technology #infosec #information_security #vulnerability
Medium
FINAL WEEK ! — Call for Speakers for “VulnCon 2026” Closes on December 22, 2025
CVE/FIRST VulnCon 2026 will be held on April 13–16, 2026, at the DoubleTree Resort by Hilton Hotel Paradise Valley — Scottsdale, in…
17 views
Daily Writeups
⤷ Title: How Law Enforcement Tracks Darkweb Markets
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:29:17 GMT
════════════════════════
⌗ Tags: #darknet #cybersecurity #osint #infosec
Medium
How Law Enforcement Tracks Darkweb Markets
Research into law enforcement darkweb markets shows how authorities monitor darknet marketplaces using long-term surveillance, undercover…
12 views