Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: How To Browse Faster and Get More Done Using Adapt Browser
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 11:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
54 views
Daily Writeups
⤷ Title: Price Manipulation Vulnerability in E-Commerce Applications
════════════════════════
𐀪 Author: Nidhi kathayat
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:48:18 GMT
════════════════════════
⌗ Tags: #web_vulnerabilities #bug_bounty_tips #ctf_writeup #bug_bounty #ctf
Medium
Price Manipulation Vulnerability in E-Commerce Applications
E-commerce applications are widely used, but many of them still suffer from serious security issues. One very common vulnerability is price…
52 views
Daily Writeups
⤷ Title: Ghost Posts via IDOR: How I Read Unpublished NASA Blog Content Using Simple Math
════════════════════════
𐀪 Author: LETCHU PKT
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:52:24 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_writeup #bug_bounty #bug_bounty_tips #cyber_security_awareness
Medium
Ghost Posts via IDOR: How I Read Unpublished NASA Blog Content Using Simple Math
How I used simple math to read NASA’s press releases before they were published an IDOR case study on WordPress.
47 views
Daily Writeups
⤷ Title: Threat Modeling MCP Servers with STRIDE: A Practical Guide
════════════════════════
𐀪 Author: Odell Moreno
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:02:59 GMT
════════════════════════
⌗ Tags: #threat_modeling #cybersecurity #llm #application_security #ai_security
Medium
Threat Modeling MCP Servers with STRIDE: A Practical Guide
MCP servers turn an LLM from a text generator into an actor: they can read data, call APIs, touch files, and sometimes run commands. That…
39 views
Daily Writeups
⤷ Title: Root Me — JavaScript Obfuscation 3 (walkthrough)
════════════════════════
𐀪 Author: Ariana-FR
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:45:09 GMT
════════════════════════
⌗ Tags: #web_development #programming #hacking #javascript
Medium
Root Me — JavaScript Obfuscation 3 (walkthrough)
1 january 2026 12:4
32 views
Daily Writeups
⤷ Title: Hunting a Zero-Click Reflected XSS: Breaking Out of Attributes in WordPress Search
════════════════════════
𐀪 Author: Maverick
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:24:18 GMT
════════════════════════
⌗ Tags: #web_security #technology #hacking #cybersecurity #wordpress
Medium
Hunting a Zero-Click Reflected XSS: Breaking Out of Attributes in WordPress Search
As a security researcher, one of the most satisfying finds is a zero-click vulnerability something that executes malicious code the moment…
27 views
Daily Writeups
⤷ Title: The Chameleon Attack: Breaking Apache StreamPipes with Recursive Object Tampering (CVE-2025–47411)
════════════════════════
𐀪 Author: Francisco Paz Mccausland
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:16:14 GMT
════════════════════════
⌗ Tags: #cve #hacking #ethical_hacking #cybersecurity
Medium
The Chameleon Attack: Breaking Apache StreamPipes with Recursive Object Tampering (CVE-2025–47411)
Why modern WAFs fail against “Read-Modify-Write” exploits in Java architectures.
21 views
Daily Writeups
⤷ Title: I Tried a 10 Year Old Wi-Fi Hacking Tool and It Still Worked
════════════════════════
𐀪 Author: alopix
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:42:31 GMT
════════════════════════
⌗ Tags: #programming #wifi #cybersecurity #communication #hacking
Medium
I Tried a 10 Year Old Wi-Fi Hacking Tool and It Still Worked
DISCLAIMER: FOR EDUCATIONAL(AND NOSTALGIA) PURPOSES ONLY
17 views
Daily Writeups
⤷ Title: ARP Poisoning with ARP Spoof: A Guide to MITM Attacks
════════════════════════
𐀪 Author: Vignesh R
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:32:26 GMT
════════════════════════
⌗ Tags: #mitm #arp_poisoning #hacking #arp_spoof #arp_spoofing
Medium
ARP Poisoning with ARP Spoof: A Guide to MITM Attacks
ARP spoofing & Man In The Middle Attacks Execution & Detection
19 views
Daily Writeups
⤷ Title: Linux Privilege Escalation via Sudo Misconfigurations: Shell Escaping, LD_PRELOAD & Real-World…
════════════════════════
𐀪 Author: Amrit Sinha
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:02:18 GMT
════════════════════════
⌗ Tags: #linux #programming #cybersecurity #coding #hacking
Medium
Linux Privilege Escalation via Sudo Misconfigurations: Shell Escaping, LD_PRELOAD & Real-World Exploits
In Part 1, we kicked down the front door by exploiting weak file permissions on /etc/shadow. But in my recent Red Team engagements, I’ve…
20 views
Daily Writeups
⤷ Title: KaffeeSoc Try Hack Me Room
════════════════════════
𐀪 Author: Mylescorey
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:58:59 GMT
════════════════════════
⌗ Tags: #osint #tryhackme
Medium
KaffeeSoc Try Hack Me Room
The first tasked is simple it asking you who hired us and who we are investigation. Reading the background information, we can find this…
25 views
Daily Writeups
⤷ Title: LokidresCTF Write-Up
════════════════════════
𐀪 Author: Myusuftr
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:01:07 GMT
════════════════════════
⌗ Tags: #ctf #pentesting #cybersecurity #tryhackme #ctf_writeup
Medium
LokidresCTF Write-Up
This write-up covers the solution of my first CTF machine, LokidresCTF.
21 views
Daily Writeups
⤷ Title: Cap — HackTheBox Write-up
════════════════════════
𐀪 Author: CO0L7
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 13:53:33 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup
37 views
Daily Writeups
⤷ Title: When Flexibility Becomes a Backdoor: Analyzing CVE-2025–69288 in Titra
════════════════════════
𐀪 Author: Francisco Paz Mccausland
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:51:21 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cve #cybersecurity
Medium
When Flexibility Becomes a Backdoor: Analyzing CVE-2025–69288 in Titra
How a “custom rule” feature can turn into a Remote Code Execution nightmare.
36 views
Daily Writeups
⤷ Title: Using ffuf as a Practical Replacement for Burp Intruder (Community Edition)
════════════════════════
𐀪 Author: aimbot97
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 15:15:35 GMT
════════════════════════
⌗ Tags: #web_application_security #sql_injection #fuzzing #burpsuite #blind_sql_injection
Medium
🔍 Using ffuf as a Practical Replacement for Burp Intruder (Community Edition)
While learning SQL Injection exploitation, I encountered a real limitation that many security learners and professionals face:  Burp Suite…
45 views
Daily Writeups
⤷ Title: Sıfırdan Otomasyona: Kapsamlı Recon Rehberi
════════════════════════
𐀪 Author: Sakarya Üniversitesi Siber Güvenlik Topluluğu
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 14:05:31 GMT
════════════════════════
⌗ Tags: #saüsiber #reconnaissance #recon
Medium
Sıfırdan Otomasyona: Kapsamlı Recon Rehberi
Hazırlayan: Burak Demir
Düzenleyen: Sena Kuzğu
59 views
Daily Writeups
⤷ Title: ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 21:22:00 +0530
════════════════════════
⌗ Tags: No_Tags
45 views
Daily Writeups
⤷ Title: The Multi-Tenancy Bug That Leaked 10,000 User Records
════════════════════════
𐀪 Author: Byte Me Daily
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 17:46:51 GMT
════════════════════════
⌗ Tags: #software_development #database #software_engineering #technology #bug_bounty
Medium
The Multi-Tenancy Bug That Leaked 10,000 User Records
The Query That Looked Innocent
46 views
Daily Writeups
⤷ Title: Chapter 3: Policies & Escalation
════════════════════════
𐀪 Author: Aang
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 17:25:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #red_team #ethical_hacking #active_directory #information_technology
Medium
Chapter 3 — AD Policies & Escalation
Learning about Group Policy (GPO), Kerberoasting, AS-REP Roasting, and Delegation.
26 views
Daily Writeups
⤷ Title: Beyond the APK: Exploiting Misconfigured Firebase Databases
════════════════════════
𐀪 Author: Samet Yiğit
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 16:49:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #bug_bounty_writeup
Medium
Beyond the APK: Exploiting Misconfigured Firebase Databases
In the fast-paced world of mobile development, Google’s Firebase is a lifesaver. However, speed often leads to oversight. One of the most…
21 views
Daily Writeups
⤷ Title: Web Application Security
════════════════════════
𐀪 Author: Rashed Ut
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 16:11:41 GMT
════════════════════════
⌗ Tags: #pentesting #application_security #web_application_security #information_security
Medium
Web Application Security
A Step-by-Step Learning Guide for Beginners
20 views