Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: How to Become a Smart Contract Bug Hunter and Get Paid in 2026
════════════════════════
𐀪 Author: PMartin
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:06:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #blockchain_development #blockchain #blockchain_technology #bug_bounty_tips
Medium
How to Become a Smart Contract Bug Hunter and Get Paid in 2026
Smart contract bug hunting remains one of the highest-paying remote skills in Web3, and 2026 is shaping up to be a banner year for security…
35 views
Daily Writeups
⤷ Title: The Day I Found a Google Sheets API Key Hidden in Plain Sight — Inside a Public JavaScript File
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:28:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_hunting #hacking #bug_bounty_writeup
Medium
🔑 The Day I Found a Google Sheets API Key Hidden in Plain Sight — Inside a Public JavaScript File
Some vulnerabilities scream for attention. Others sit quietly, tucked inside lines of JavaScript, waiting for someone curious enough to…
38 views
Daily Writeups
⤷ Title: The Night I Discovered a Production Server Hiding Behind an Exposed IP — And Why It Mattered…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:27:31 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #bug_bounty_tips #comolho #bug_bounty
Medium
🌐 The Night I Discovered a Production Server Hiding Behind an Exposed IP — And Why It Mattered More Than It Seemed
Some bug bounty stories start with complicated payloads or clever fuzzing tricks.  This one started with something much simpler:
33 views
Daily Writeups
⤷ Title: AOC 2025 DAY 24- Exploitation with cURL — Hoperation Eggsploit Solutions
════════════════════════
𐀪 Author: Saiaditya
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:04:20 GMT
════════════════════════
⌗ Tags: #aoc2025 #tryhackme_writeup #tryhackme_walkthrough #tryhackme #curl
Medium
AOC 2025 DAY 24- Exploitation with cURL — Hoperation Eggsploit Solutions
Make a POST request to the /post.php endpoint with the username admin and the password admin. What is the flag you receive?
38 views
Daily Writeups
⤷ Title: CompTIA Certifications changed my life
════════════════════════
𐀪 Author: GhostInject
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 20:27:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #career_change #motivation #comptia #ethical_hacking
Medium
CompTIA Certifications changed my life
Around 4 years ago I took the Net+ and failed bad… I thought I was crazy for trying to get into cyber security and change careers, So I…
47 views
Daily Writeups
⤷ Title: The SOC Access Paradox: When Your Security Team Becomes the Risk
════════════════════════
𐀪 Author: Steve Anderson
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 21:52:57 GMT
════════════════════════
⌗ Tags: #infosec #identity_management #cyberattack #cybersecurity
Medium
The SOC Access Paradox: When Your Security Team Becomes the Risk
Here’s an awkward question: Who’s the most over-permissioned group in your organisation?
47 views
Daily Writeups
⤷ Title: Hacking Juice Shop: From Recon to Admin Access in 48 Hours
════════════════════════
𐀪 Author: Mohamed Magdy
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 23:35:53 GMT
════════════════════════
⌗ Tags: #owasp_juice_shop #penetration_testing #cybersecurity #owasp
Medium
Hacking Juice Shop: From Recon to Admin Access in 48 Hours
Disclaimer: The testing activities documented in this post were conducted with explicit authorization for educational and research purposes…
47 views
Daily Writeups
⤷ Title: AoC 2025 XSS — Merry XSSMas
════════════════════════
𐀪 Author: Steven Estill Jr
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 23:25:29 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme_writeup #stored_xss #reflected_xss #xss_vulnerability
Medium
AoC 2025 XSS — Merry XSSMas
Cross-Site Scripting (XSS) is a web app vulnerability that lets evil bunnies inject malicious code into the input fields the reflect…
41 views
Daily Writeups
⤷ Title: Subscription Bypass Leading to Full Access to Paid Features
════════════════════════
𐀪 Author: Hossam Hamada
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:14:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #writing_tips #business_logic #bugbounty_writeup
Medium
Subscription Bypass Leading to Full Access to Paid Features
Hi, my name is Hossam Hamada, I’m a Bug Bounty Hunter, and today I’ll be sharing a vulnerability I discovered in a Bug Bounty program on…
34 views
Daily Writeups
⤷ Title: Thoughts about email verification process in web applications
════════════════════════
𐀪 Author: Wsxcxx
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:53:21 GMT
════════════════════════
⌗ Tags: #sign_up #programming #application_security #application_development #email_verification
Medium
Thoughts about email verification process in web applications
I tried to talk about the title without code or drawing in this article. I thought this is be quite nice and fine topic to talk about.
36 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Owl Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:20:38 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #information_security #tryhackme
Medium
TryHackMe: Year of the Owl Writeup
This box is ranked hard difficulty on THM, it involves heaps of enumeration on both TCP/UDP, exploiting WINRM to get a foothold on the…
36 views
Daily Writeups
⤷ Title: The Patch Hunter: Automating 1-Day Exploits with DiffRays and IDA Pro
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:06:01 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AutoDiff #Binary Diffing #CVE #DiffRays #Exploit Development #IDA Domain API #IDA Pro #Patch Analysis #reverse engineering #Vulnerability Research #Winbindex
Information Security News
The Patch Hunter: Automating 1-Day Exploits with DiffRays and IDA Pro
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering. It leverages IDA Pro and the IDA Domain API …
41 views
Daily Writeups
⤷ Title: Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:59:14 +0000
════════════════════════
⌗ Tags: #Windows #BitLocker #CPU Offloading #Encryption #Intel Panther Lake #Microsoft Ignite 2025 #NVMe #SSD performance #Windows 11 #Windows Security #XTS_AES_256
Information Security News
Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS
Microsoft has introduced a new hardware-accelerated version of its built-in BitLocker encryption in Windows 11. The feature is designed to boost performance and reduce CPU load by offloading heavy…
30 views
Daily Writeups
⤷ Title: The Robot Revolter: How Hackers Turned a $14,000 Humanoid Into a Physical Attacker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:57:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI safety #cybersecurity #DARKNAVY #GEEKCon 2025 #Humanoid Robots #IoT Security #Physical Botnet #Robot Hacking #Unitree G1 #Unitree Go2 #Voice Command Exploit
Information Security News
The Robot Revolter: How Hackers Turned a $14,000 Humanoid Into a Physical Attacker
Commercial robots have proved far less secure than many assume. Security researchers are increasingly demonstrating that certain machines can be taken over in a matter of minutes, and that flaws i…
22 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: Inside the $2B/Month Crypto Laundering Bazaars
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:56:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Fraud #Dark Web #Elliptic #Huione Guarantee #Money Laundering #pig butchering #Southeast Asia #Telegram #Tether #Tudou Guarantee #USDT #Xinbi Guarantee
Information Security News
The Dark Side of Telegram: Inside the $2B/Month Crypto Laundering Bazaars
The world’s largest online black markets may no longer reside in the dark web, but openly on Telegram itself. According to analysts, a sprawling network of Chinese-language “guarantor markets” has…
19 views
Daily Writeups
⤷ Title: Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:54:51 +0000
════════════════════════
⌗ Tags: #Windows #bug fix #Enterprise IT #IIS #KB5074976 #Microsoft #MSMQ #Out_of_Band #Patch Tuesday #Sysadmin #Windows Server #Windows Update
Information Security News
Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
Microsoft has released an out-of-band update to address a Message Queuing issue that emerged after the December 2025 update. The newly issued patches apply to Windows 10 22H2 ESU, Windows 10 Enter…
18 views
Daily Writeups
⤷ Title: The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:11:17 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Security #dos #FPU #Hypervisor #Intel AMX #kernel panic #KVM #Linux Kernel #Paolo Bonzini #red hat #virtualization #Xeon Scalable #XSAVE
Daily CyberSecurity
The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
An unpleasant flaw surfaced in Linux—one capable of causing serious headaches for server administrators, particularly in public cloud environments. The issue arises when a KVM guest virtual machin…
29 views
Daily Writeups
⤷ Title: Beyond Pixel: Google Rebrands Magic Cue to Bring Proactive AI to All Androids
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:30:54 +0000
════════════════════════
⌗ Tags: #Android #AI #android #Contextual Suggestions #Gemini Nano #google #Google Play Services #machine_learning #Magic Cue #Pixel 10 #privacy #Private Compute Core
Daily CyberSecurity
Beyond Pixel: Google Rebrands Magic Cue to Bring Proactive AI to All Androids
Earlier this year, Google introduced the Pixel 10 lineup with a headline AI feature called “Magic Cue,” designed to proactively offer services based on a user’s context. That capability now appear…
22 views
Daily Writeups
⤷ Title: The 2nm Overflow: Why AMD and Tesla are Deserting TSMC for Samsung’s Texas Fab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:24:50 +0000
════════════════════════
⌗ Tags: #Technology #18A #2nm #AMD #Apple #Digital Markets Act #Foundry #GAA #geopolitics #google #intel #nvidia #samsung #Taylor Texas #Tesla #TSMC
Daily CyberSecurity
The 2nm Overflow: Why AMD and Tesla are Deserting TSMC for Samsung’s Texas Fab
Although TSMC continues to sit unchallenged at the pinnacle of process technology—commanding an effective 100% share of advanced AI chip manufacturing—two powerful forces, capacity constraints and…
18 views
Daily Writeups
⤷ Title: Intel’s 14A/18A Super Chip: The AI “System Foundry” That Challenges TSMC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:19:24 +0000
════════════════════════
⌗ Tags: #Technology #14A #18A_PT #AI Silicon #EMIB_T #Foveros Direct 3D #HBM4 #HBM5 #Heterogeneous Integration #Intel Foundry #PowerDirect #RibbonFET 2 #TSMC CoWoS
Daily CyberSecurity
Intel’s 14A/18A Super Chip: The AI “System Foundry” That Challenges TSMC
In a bid to demonstrate that it can truly rival TSMC in the foundry arena, Intel recently released a conceptual technology video through Intel Foundry, unveiling its next-generation hybrid packagi…
18 views
Daily Writeups
⤷ Title: The End of AirPods’ Monopoly: Apple to Unlock Proximity Pairing and Smartwatch Replies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:01:03 +0000
════════════════════════
⌗ Tags: #Technology #AirPods #Apple #Apple Watch #Bluetooth #DMA #European Union #iOS 26.3 #iphone #Proximity Pairing #sony #Tech Policy 2026 #Wear OS
Daily CyberSecurity
The End of AirPods’ Monopoly: Apple to Unlock Proximity Pairing and Smartwatch Replies
To comply with the European Union’s stringent Digital Markets Act (DMA), Apple is expected to introduce two pivotal features for the EU in the upcoming iOS 26.3 update: third-party device Proximit…
23 views