Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: TryHackME VM: GamingServer
════════════════════════
𐀪 Author: Justin Jude Cabodil
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:30:39 GMT
════════════════════════
⌗ Tags: #tryhackme #privilege_escalation #linux #technical_writing #lxd
Medium
TryHackME VM: GamingServer
Penetration Testing Report
23 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 — Day 14
 Containers: DoorDasher’s Demise (and How I Escaped a Docker Jail)
════════════════════════
𐀪 Author: Akshat Patel
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:29:47 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #containers #advent_of_cyber_2025 #docker
Medium
Advent of Cyber 2025 — Day 14
 Containers: DoorDasher’s Demise (and How I Escaped a Docker Jail)
When I saw that Day 14 was about containers and Docker, I was weirdly excited. Containers are everywhere in modern infrastructure, and as…
26 views
Daily Writeups
⤷ Title: TryHackMe: Creative Room Writeup
════════════════════════
𐀪 Author: Anmolchhetri
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:26:05 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #tryhackme_walkthrough #tryhackme #cybersecurity #ctf
Medium
TryHackMe: Creative Room Writeup
A detailed walkthrough of the Creative room on TryHackMe, demonstrating subdomain enumeration, SSRF exploitation, and privilege escalation…
35 views
Daily Writeups
⤷ Title: Step Into Cybersecurity with Ethical Hacking Training from Ascend Education
════════════════════════
𐀪 Author: Samuel
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 15:10:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking
Medium
Step Into Cybersecurity with Ethical Hacking Training from Ascend Education
As cyber threats grow more advanced, organizations across the globe are facing a critical challenge — how to protect their systems, data…
47 views
Daily Writeups
⤷ Title: GitHub Scanner for React2Shell (CVE-2025-55182) Turns Out to Be Malware
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:34:57 +0000
════════════════════════
⌗ Tags: #Malware #Scams and Fraud #Security #Cybersecurity #Fraud #GitHub #React2Shell #Scam #security #Vulnerability
Hackread
GitHub Scanner for React2Shell (CVE-2025-55182) Turns Out to Be Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Buried in JavaScript: How One Comment Led Me to a Production API Key
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:14:47 GMT
════════════════════════
⌗ Tags: #money #bug_bounty #hacking #bug_bounty_tips #cybersecurity
Medium
Buried in JavaScript: How One Comment Led Me to a Production API Key 💻🔑
Free Link 🎈
33 views
Daily Writeups
⤷ Title: What is a DAST scan anyway?
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:59:13 GMT
════════════════════════
⌗ Tags: #cicd_pipeline #dast #devsecops #application_security #zaproxy
Medium
What is a DAST scan anyway?
If you’ve worked in software development recently, you’ll know that most modern applications don’t go live without some form of security…
21 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 Day5 — Tryhackme walkthrough(IDOR — Santa’s Little IDOR)
════════════════════════
𐀪 Author: TRedEye
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:05:06 GMT
════════════════════════
⌗ Tags: #hacking #tryhackme #tryhackme_writeup #tryhackme_walkthrough #aoc2025
Medium
Advent of Cyber 2025 Day5 — Tryhackme walkthrough(IDOR — Santa’s Little IDOR)
Advent of Cyber 2025 BY ::-> TRedEye
18 views
Daily Writeups
⤷ Title: Hands-On API Security: Lessons from a Vulnerable JWT Implementation
════════════════════════
𐀪 Author: Ian Zammit
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:50:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #api #hacking #jwt
Medium
Hands-On API Security: Lessons from a Vulnerable JWT Implementation
I built this lab to practice API security and improve my understanding of how poorly implemented JSON Web Tokens (JWTs) can put an entire…
15 views
Daily Writeups
⤷ Title: FHIR API Security: Beyond OAuth 2.0
════════════════════════
𐀪 Author: Cyberspecs
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:39:19 GMT
════════════════════════
⌗ Tags: #product_development #software_engineering #product_management #product_design #infosec
Medium
FHIR API Security: Beyond OAuth 2.0
🏥 The Security Challenge Nobody Talks About
19 views
Daily Writeups
⤷ Title: CDK Tool— Konteyner Sızma Aracı
════════════════════════
𐀪 Author: Adil Azimdegil
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:04:42 GMT
════════════════════════
⌗ Tags: #cdk #cybersecurity #containers #penetration_testing #docker
Medium
CDK Tool— Konteyner Sızma Aracı
CDK (Container DucK), herhangi bir işletim sistemi bağımlılığı olmaksızın, konteynerlerde zaafiyer sömürmek için tasarlanmış, açık kaynaklı…
17 views
Daily Writeups
⤷ Title: Kerberos Delegation and Common Attack Scenarios
════════════════════════
𐀪 Author: Louis Trout
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 15:58:21 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory_security #network_penetration_test
Medium
Kerberos Delegation and Common Attack Scenarios
I wrote this as an easy reference to capture required fundamental knowledge and also a high-level overview of the more common exploitation…
15 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 - Day 15 Web Attack Forensics - Drone Alone
════════════════════════
𐀪 Author: Akshat Patel
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:04:47 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #advent_of_cyber_2025 #cybersecurity #splunk
Medium
Advent of Cyber 2025 - Day 15 Web Attack Forensics - Drone Alone
I’ve been slowly working through TryHackMe’s Advent of Cyber 2025, not just to farm badges, but to treat it like a mini blue-team…
19 views
Daily Writeups
⤷ Title: Advent of Cyber 2025|Day 15| Web Attack Forensics — Drone Alone TryhackMe
════════════════════════
𐀪 Author: Md Amjad
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:46:05 GMT
════════════════════════
⌗ Tags: #15_day #advent_of_cyber_2025 #tryhackme #web_attack_forensics
Medium
Advent of Cyber 2025|Day 15| Web Attack Forensics — Drone Alone TryhackMe
Explore web attack forensics using Splunk.
23 views
Daily Writeups
⤷ Title: Web Attack Forensics — Drone Alone|Try Hack Me walkthrough
════════════════════════
𐀪 Author: Fazal
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:44:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough #servers #command_injection
Medium
Web Attack Forensics — Drone Alone|Try Hack Me walkthrough
TBFC’s drone scheduler web UI is getting strange, long HTTP requests containing Base64 chunks. Splunk raises an alert: “Apache spawned an…
26 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 Day4 — Tryhackme walkthrough(Room:-AI in Security — old sAInt nick)
════════════════════════
𐀪 Author: TRedEye
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 16:20:44 GMT
════════════════════════
⌗ Tags: #aoc2025 #tryhackme_writeup #tryhackme_walkthrough #cybersecurity #tryhackme
Medium
Advent of Cyber 2025 Day4 — Tryhackme walkthrough(Room:-AI in Security — old sAInt nick)
Advent of Cyber 2025 BY ::-> TRedEye
34 views
Daily Writeups
⤷ Title: I’m not arrogant — I just execute what others only talk about.
════════════════════════
𐀪 Author: Neerav
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 17:30:30 GMT
════════════════════════
⌗ Tags: #quotes #ethical_hacking #cybersecurity #cyberwarrior
Medium
I’m not arrogant — I just execute what others only talk about.
Neerav Patel (Cybe
43 views
Daily Writeups
⤷ Title: Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 23:16:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: The CGI Script That Should Have Stayed Hidden — How a Forgotten Diagnostic File Exposed an…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 18:46:12 GMT
════════════════════════
⌗ Tags: #bugcrowd #bug_bounty_tips #hacker #bug_bounty_writeup #bug_bounty
Medium
🌐 The CGI Script That Should Have Stayed Hidden — How a Forgotten Diagnostic File Exposed an Entire Server Environment
Every bug hunter knows this feeling:  You’re scanning a domain, expecting the usual — a login page, some APIs, maybe a misconfigured…
36 views
Daily Writeups
⤷ Title: ⚡ The Reflected XSS Hidden Inside a Login Page — And How a Single Parameter Became a Security Weak…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 18:45:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #hunting #bug_bounty_tips #hackerone #bug_bounty_writeup
Medium
⚡ The Reflected XSS Hidden Inside a Login Page — And How a Single Parameter Became a Security Weak Point
Some vulnerabilities feel almost poetic.  A login page — a place designed to protect access — accidentally becomes the perfect spot for an…
20 views
Daily Writeups
⤷ Title: I Broke a Fortune 100 in 14 Days by Reading JavaScript
════════════════════════
𐀪 Author: Adnan
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 19:23:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
I Broke a Fortune 100 in 14 Days by Reading JavaScript
The Reality
21 views