Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Exploitation with cURL — Hoperation Eggsploit ~Last room of Aod-2025
════════════════════════
𐀪 Author: Mann24>
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 18:34:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #curl #aoc2025 #tryhackme #ethical_hacking
Medium
Exploitation with cURL — Hoperation Eggsploit ~Last room of Aod-2025
HTTP Requests Using cURL
41 views
Daily Writeups
⤷ Title: TryHackMe Writeup: ColddBox Easy
════════════════════════
𐀪 Author: Berkay AĞGÜL
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 18:12:31 GMT
════════════════════════
⌗ Tags: #cybercrime #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup
Medium
TryHackMe Writeup: ColddBox Easy
Siber güvenlik operasyonlarında bazen karşımıza sadece tek bir giriş noktasının olduğu, tüm zafiyet zincirinin tek bir servis üzerine…
43 views
Daily Writeups
⤷ Title: Understanding Broken Object Level Authorization (BOLA)
════════════════════════
𐀪 Author: Chihurumnanya Ruth Godwin
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 18:57:23 GMT
════════════════════════
⌗ Tags: #data_security #owasp_api_security_top_10 #api_security #cybersecurity #information_security
Medium
Understanding Broken Object Level Authorization (BOLA)
Why API1:2023 Remains the Most Critical API Security Risk
47 views
Daily Writeups
⤷ Title: One Request, Ten Times: How I Broke Admin Access with a Race Condition
════════════════════════
𐀪 Author: 0xMoussa
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:49:09 GMT
════════════════════════
⌗ Tags: #infosec #race_condition #cybersecurity #bug_bounty #ethical_hacking
Medium
One Request, Ten Times: How I Broke Admin Access with a Race Condition
One Request, Ten Times: How I Broke Admin Access with a Race Condition Intrduction During a recent bug bounty program, I discovered a critical race condition vulnerability in a team invitation …
41 views
Daily Writeups
⤷ Title: How to Become a Smart Contract Bug Hunter and Get Paid in 2026
════════════════════════
𐀪 Author: PMartin
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:06:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #blockchain_development #blockchain #blockchain_technology #bug_bounty_tips
Medium
How to Become a Smart Contract Bug Hunter and Get Paid in 2026
Smart contract bug hunting remains one of the highest-paying remote skills in Web3, and 2026 is shaping up to be a banner year for security…
35 views
Daily Writeups
⤷ Title: The Day I Found a Google Sheets API Key Hidden in Plain Sight — Inside a Public JavaScript File
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:28:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_hunting #hacking #bug_bounty_writeup
Medium
🔑 The Day I Found a Google Sheets API Key Hidden in Plain Sight — Inside a Public JavaScript File
Some vulnerabilities scream for attention. Others sit quietly, tucked inside lines of JavaScript, waiting for someone curious enough to…
38 views
Daily Writeups
⤷ Title: The Night I Discovered a Production Server Hiding Behind an Exposed IP — And Why It Mattered…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:27:31 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #bug_bounty_tips #comolho #bug_bounty
Medium
🌐 The Night I Discovered a Production Server Hiding Behind an Exposed IP — And Why It Mattered More Than It Seemed
Some bug bounty stories start with complicated payloads or clever fuzzing tricks.  This one started with something much simpler:
33 views
Daily Writeups
⤷ Title: AOC 2025 DAY 24- Exploitation with cURL — Hoperation Eggsploit Solutions
════════════════════════
𐀪 Author: Saiaditya
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:04:20 GMT
════════════════════════
⌗ Tags: #aoc2025 #tryhackme_writeup #tryhackme_walkthrough #tryhackme #curl
Medium
AOC 2025 DAY 24- Exploitation with cURL — Hoperation Eggsploit Solutions
Make a POST request to the /post.php endpoint with the username admin and the password admin. What is the flag you receive?
38 views
Daily Writeups
⤷ Title: CompTIA Certifications changed my life
════════════════════════
𐀪 Author: GhostInject
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:27:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #career_change #motivation #comptia #ethical_hacking
Medium
CompTIA Certifications changed my life
Around 4 years ago I took the Net+ and failed bad… I thought I was crazy for trying to get into cyber security and change careers, So I…
47 views
Daily Writeups
⤷ Title: The SOC Access Paradox: When Your Security Team Becomes the Risk
════════════════════════
𐀪 Author: Steve Anderson
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:52:57 GMT
════════════════════════
⌗ Tags: #infosec #identity_management #cyberattack #cybersecurity
Medium
The SOC Access Paradox: When Your Security Team Becomes the Risk
Here’s an awkward question: Who’s the most over-permissioned group in your organisation?
47 views
Daily Writeups
⤷ Title: Hacking Juice Shop: From Recon to Admin Access in 48 Hours
════════════════════════
𐀪 Author: Mohamed Magdy
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 23:35:53 GMT
════════════════════════
⌗ Tags: #owasp_juice_shop #penetration_testing #cybersecurity #owasp
Medium
Hacking Juice Shop: From Recon to Admin Access in 48 Hours
Disclaimer: The testing activities documented in this post were conducted with explicit authorization for educational and research purposes…
47 views
Daily Writeups
⤷ Title: AoC 2025 XSS — Merry XSSMas
════════════════════════
𐀪 Author: Steven Estill Jr
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 23:25:29 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme_writeup #stored_xss #reflected_xss #xss_vulnerability
Medium
AoC 2025 XSS — Merry XSSMas
Cross-Site Scripting (XSS) is a web app vulnerability that lets evil bunnies inject malicious code into the input fields the reflect…
41 views
Daily Writeups
⤷ Title: Subscription Bypass Leading to Full Access to Paid Features
════════════════════════
𐀪 Author: Hossam Hamada
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:14:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #writing_tips #business_logic #bugbounty_writeup
Medium
Subscription Bypass Leading to Full Access to Paid Features
Hi, my name is Hossam Hamada, I’m a Bug Bounty Hunter, and today I’ll be sharing a vulnerability I discovered in a Bug Bounty program on…
34 views
Daily Writeups
⤷ Title: Thoughts about email verification process in web applications
════════════════════════
𐀪 Author: Wsxcxx
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:53:21 GMT
════════════════════════
⌗ Tags: #sign_up #programming #application_security #application_development #email_verification
Medium
Thoughts about email verification process in web applications
I tried to talk about the title without code or drawing in this article. I thought this is be quite nice and fine topic to talk about.
36 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Owl Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:20:38 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #information_security #tryhackme
Medium
TryHackMe: Year of the Owl Writeup
This box is ranked hard difficulty on THM, it involves heaps of enumeration on both TCP/UDP, exploiting WINRM to get a foothold on the…
36 views
Daily Writeups
⤷ Title: The Patch Hunter: Automating 1-Day Exploits with DiffRays and IDA Pro
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:06:01 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AutoDiff #Binary Diffing #CVE #DiffRays #Exploit Development #IDA Domain API #IDA Pro #Patch Analysis #reverse engineering #Vulnerability Research #Winbindex
Information Security News
The Patch Hunter: Automating 1-Day Exploits with DiffRays and IDA Pro
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering. It leverages IDA Pro and the IDA Domain API …
41 views
Daily Writeups
⤷ Title: Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:59:14 +0000
════════════════════════
⌗ Tags: #Windows #BitLocker #CPU Offloading #Encryption #Intel Panther Lake #Microsoft Ignite 2025 #NVMe #SSD performance #Windows 11 #Windows Security #XTS_AES_256
Information Security News
Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS
Microsoft has introduced a new hardware-accelerated version of its built-in BitLocker encryption in Windows 11. The feature is designed to boost performance and reduce CPU load by offloading heavy…
30 views
Daily Writeups
⤷ Title: The Robot Revolter: How Hackers Turned a $14,000 Humanoid Into a Physical Attacker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:57:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI safety #cybersecurity #DARKNAVY #GEEKCon 2025 #Humanoid Robots #IoT Security #Physical Botnet #Robot Hacking #Unitree G1 #Unitree Go2 #Voice Command Exploit
Information Security News
The Robot Revolter: How Hackers Turned a $14,000 Humanoid Into a Physical Attacker
Commercial robots have proved far less secure than many assume. Security researchers are increasingly demonstrating that certain machines can be taken over in a matter of minutes, and that flaws i…
22 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: Inside the $2B/Month Crypto Laundering Bazaars
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:56:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Fraud #Dark Web #Elliptic #Huione Guarantee #Money Laundering #pig butchering #Southeast Asia #Telegram #Tether #Tudou Guarantee #USDT #Xinbi Guarantee
Information Security News
The Dark Side of Telegram: Inside the $2B/Month Crypto Laundering Bazaars
The world’s largest online black markets may no longer reside in the dark web, but openly on Telegram itself. According to analysts, a sprawling network of Chinese-language “guarantor markets” has…
19 views
Daily Writeups
⤷ Title: Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:54:51 +0000
════════════════════════
⌗ Tags: #Windows #bug fix #Enterprise IT #IIS #KB5074976 #Microsoft #MSMQ #Out_of_Band #Patch Tuesday #Sysadmin #Windows Server #Windows Update
Information Security News
Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
Microsoft has released an out-of-band update to address a Message Queuing issue that emerged after the December 2025 update. The newly issued patches apply to Windows 10 22H2 ESU, Windows 10 Enter…
18 views
Daily Writeups
⤷ Title: The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:11:17 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Security #dos #FPU #Hypervisor #Intel AMX #kernel panic #KVM #Linux Kernel #Paolo Bonzini #red hat #virtualization #Xeon Scalable #XSAVE
Daily CyberSecurity
The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
An unpleasant flaw surfaced in Linux—one capable of causing serious headaches for server administrators, particularly in public cloud environments. The issue arises when a KVM guest virtual machin…
29 views