Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Working Like a Professional Pentester (script -f mlog.log)
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:59:43 GMT
════════════════════════
⌗ Tags: #kali_linux #information_security #ethical_hacking #penetration_testing #cybersecurity
Medium
Working Like a Professional Pentester (script -f mlog.log)
In penetration testing, technical skills alone are not enough. Documentation and proper logging are just as important as the attacks…
17 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with all tags blocked except custom ones
════════════════════════
𐀪 Author: KRY
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:50:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberkry #penetration_testing #portswigger #xx
Medium
Lab: Reflected XSS into HTML context with all tags blocked except custom ones
Description
15 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with most tags and attributes blocked
════════════════════════
𐀪 Author: KRY
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:48:22 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #cyberkry #xx #portswigger
Medium
Lab: Reflected XSS into HTML context with most tags and attributes blocked
Description
16 views
Daily Writeups
⤷ Title: How I Phished a Toy Factory: A Write-up for THM's Merry Clickmas Room
════════════════════════
𐀪 Author: Spiritsimba
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 15:36:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #phishing #ctf_writeup
Medium
How I Phished a Toy Factory: A Write-up for THM's Merry Clickmas Room
Room Name: Phishing — Merry Clickmas 
Level: Easy 
Category: Phishing
20 views
Daily Writeups
⤷ Title: Cryptosystem TryHackMe Challenge
════════════════════════
𐀪 Author: Dreith
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:41:44 GMT
════════════════════════
⌗ Tags: #tryhackme #thm #cryptosystem #tryhackme_walkthrough
Medium
Cryptosystem TryHackMe Challenge
Welcome to an interesting cryptography challenge! In this TryHackMe room called “Cryptosystem,” I’m presented with a compelling scenario…
28 views
Daily Writeups
⤷ Title: VULNHUB HACKFEST2016: QUAOAR
════════════════════════
𐀪 Author: Rin_xinFabrelab
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:20:58 GMT
════════════════════════
⌗ Tags: #vulnhub_walkthrough #vulnhub_writeup #vulnhub #cybersecurity
Medium
VULNHUB HACKFEST2016: QUAOAR
untuk mengerjakan lab ini mula- muka kita jalankan dulu perintah
31 views
Daily Writeups
⤷ Title: HackTheBox SecretPictures WriteUp
════════════════════════
𐀪 Author: omertugrulbayram
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 15:32:48 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #cybersecurity #ctf #ctf_writeup #hackthebox
Medium
HackTheBox SecretPictures WriteUp
Merhabalar, Bugün HackTheBox platformunda bulunan Secret Pictures odasını çözeceğiz.
26 views
Daily Writeups
⤷ Title: The Role of HTTPS, Tokens, and Secure APIs in Modern Digital Products
════════════════════════
𐀪 Author: Farhan Nasir
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 15:16:59 GMT
════════════════════════
⌗ Tags: #digital_transformation #api_security #web_development #software_architecture #cybersecurity
Medium
The Role of HTTPS, Tokens, and Secure APIs in Modern Digital Products
In today’s digital economy, trust is not a feature. It is the foundation.
41 views
Daily Writeups
⤷ Title: From Winter Streets to New Year’s Eve: Nano Banana Pro Just Got Human
════════════════════════
𐀪 Author: Ayushi Srivastava
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 14:32:23 GMT
════════════════════════
⌗ Tags: #gemini_nano_banana_pro #aiimages #xs #gemini #nano_banana_pro
Medium
From Winter Streets to New Year’s Eve: Nano Banana Pro🍌 Just Got Human
On X, Nano Banana Pro is pivoting from spectacle to sentiment, generating moments that feel quietly human. A glowing winter night between…
59 views
Daily Writeups
⤷ Title: Reading Production Android Code for the First Time: A Security Researcher’s Perspective
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 17:32:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #android #mobile_security #cybersecurity #reverse_engineering
Medium
Reading Production Android Code for the First Time: A Security Researcher’s Perspective
How a Routine Bug Bounty Pulled Me into Android Mobile Reverse Engineering
60 views
Daily Writeups
⤷ Title: How A Misconfigured Password Reset Link Led to Full Account Takeover
════════════════════════
𐀪 Author: Abhishek Kumar
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 16:56:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #api #api_penetration_testing #pentesting #hacking
Medium
How A Misconfigured Password Reset Link Led to Full Account Takeover
During a recent API penetration testing, I found a password reset implementation that looked secure at first place.
It used JWT tokens…
49 views
Daily Writeups
⤷ Title: Zero Trust Was a Buzzword. In 2026, It’s Just “Security”
════════════════════════
𐀪 Author: Abhijith Soman
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 15:59:23 GMT
════════════════════════
⌗ Tags: #hacking #security #zero_trust #cybersecurity #information_security
Medium
Zero Trust Was a Buzzword. In 2026, It’s Just “Security”
For nearly a decade, Zero Trust lived in an uncomfortable place.
27 views
Daily Writeups
⤷ Title: #14- Kali Linux - Exfiltration: Moving Data Out Quietly
════════════════════════
𐀪 Author: SDNTechForum
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 17:06:48 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #kali_linux #cybersecurity #data_exfiltration
Medium
#14- Kali Linux - Exfiltration: Moving Data Out Quietly
After establishing long‑term Command and Control channels, the next step in the attack chain is exfiltration — quietly moving collected…
28 views
Daily Writeups
⤷ Title: Exploit SQL injection using sqlmap
════════════════════════
𐀪 Author: Shyam Kumar
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 17:35:15 GMT
════════════════════════
⌗ Tags: #sql #penetration_testing #sqlmap #web_penetration_testing #sql_injection
Medium
Exploit SQL injection using sqlmap
First you need to find a parameter to attack sql injection attack Like most populer parameter is id= this is a get parameter bug where we…
37 views
Daily Writeups
⤷ Title: Understanding SSRF: The Hidden Server Vulnerability
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 16:44:26 GMT
════════════════════════
⌗ Tags: #ssrf #cybersecurity
Medium
🔍 Understanding SSRF: The Hidden Server Vulnerability
Server-Side Request Forgery Explained with Real-World Impact
39 views
Daily Writeups
⤷ Title: How a Single HTTP Request Can Trigger RCE in React Server Component
════════════════════════
𐀪 Author: SecureSlate
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 07:49:52 GMT
════════════════════════
⌗ Tags: #https #react_server_component #information_security #cybersecurity #rce
Medium
How a Single HTTP Request Can Trigger RCE in React Server Component
The Hidden Vulnerability Living Inside Your RSC Payload
44 views
Daily Writeups
⤷ Title: How to Spot the Most Common Crypto Phishing Scams
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 19:55:19 +0000
════════════════════════
⌗ Tags: #Scams and Fraud #Security #Crypto #Cryptocurrency #Cybersecurity #Fraud #Phishing #Privacy #Scam #Social Engineering
Hackread
How to Spot the Most Common Crypto Phishing Scams
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
33 views
Daily Writeups
⤷ Title: Ubisoft Shuts Down Rainbow Six Siege After MongoDB Exploit Hits Players
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 19:10:44 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #database #gaming #MongoBleed #MongoDB #Rainbow Six Siege #UBisoft #Vulnerability
Hackread
Ubisoft Shuts Down Rainbow Six Siege After MongoDB Exploit Hits Players
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
31 views
Daily Writeups
⤷ Title: Understanding the insecure deserialization vulnerability
════════════════════════
𐀪 Author: hackerdevil
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 18:27:52 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #penetration_testing #web_development #bug_bounty
Medium
Understanding the insecure deserialization vulnerability
A vulnerability that’s like that quiet neighbor you never notice, until they set your house on fire.
18 views
Daily Writeups
⤷ Title: How I Got My First Bounty
════════════════════════
𐀪 Author: Adhamkhairy
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 18:24:18 GMT
════════════════════════
⌗ Tags: #writeup #bug_bounty #authentication #authorization #hackerone
Medium
How I Got My First Bounty
During extensive subdomain enumeration, I identified a subdomain inspire.example.com dedicated to collecting website design inspirations…
21 views
Daily Writeups
⤷ Title: picoCTF 2025 -Quantum Scrambler (Reverse Engineering Walkthrough)
════════════════════════
𐀪 Author: Gregory Kovalchuk
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 19:55:38 GMT
════════════════════════
⌗ Tags: #hacking #analysis #python #cryptography
Medium
picoCTF 2025 -Quantum Scrambler (Reverse Engineering Walkthrough)
The Quantum Scrambler challenge from picoCTF 2025 sounds intimidating, but once you strip away the name, the problem becomes a classic…
18 views