Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Lab: Flawed enforcement of business rules
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:21:01 GMT
════════════════════════
⌗ Tags: #ctf #pentesting #hacking #ctf_writeup #portswigger
Medium
Lab: Flawed enforcement of business rules
Lab: Flawed enforcement of business rules
 Seviye: APPRENTICE
Bu labda problem teknik bir exploitten çok, satın alma akışında yanlış…
31 views
Daily Writeups
⤷ Title: JWT Attacks | Foundational
════════════════════════
𐀪 Author: Amrsmooke
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:16:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #jwt_exploitation #hacking #linux
Medium
JWT Attacks | Foundational
Part 1: Foundational Understanding of JWTs
28 views
Daily Writeups
⤷ Title: One Leaked Password, 47 Valid Logins: How Credential Reuse Kills Companies
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:02:46 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #data_breach #passwords #account_takeover
Medium
One Leaked Password, 47 Valid Logins: How Credential Reuse Kills Companies
One employee reuses a password. That password ends up in a stealer log. Now attackers have the key to 47 different doors.
24 views
Daily Writeups
⤷ Title: Kali Linux 2025.2: What’s New, Why It Matters, and How to Install It
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:44:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #devops #hacker #devsecops
Medium
Kali Linux 2025.2: What’s New, Why It Matters, and How to Install It
The world’s most powerful open-source penetration testing distribution just got a fresh upgrade — Kali Linux 2025.2 dropped on June 13…
23 views
Daily Writeups
⤷ Title: How I Found 13 Bugs Using Just 3 Recon Tools — No Browser, Just Burp at the End
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:38:30 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #devsecops #cybersecurity #penetration_testing
Medium
How I Found 13 Bugs Using Just 3 Recon Tools — No Browser, Just Burp at the End
As a penetration tester and bug bounty hunter, I’ve learned that the less noise you make, the more you see. This write-up is about how I…
34 views
Daily Writeups
⤷ Title: Learning Through the Noise: Preparing for CPTS and Facing Imposter Syndrome
════════════════════════
𐀪 Author: Kizito Arinze Chukwu
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:17:45 GMT
════════════════════════
⌗ Tags: #imposter_syndrome #learning #cybersecurity #career_growth #penetration_testing
Medium
Learning Through the Noise: Preparing for CPTS and Facing Imposter Syndrome
I’m currently preparing for HTB Attacking Enterprise Networks while working through ippsec’s playlists as part of my CPTS exam preparation…
29 views
Daily Writeups
⤷ Title: Buda — Write-Up (The Hackers Labs)
════════════════════════
𐀪 Author: ManuM0re
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:12:10 GMT
════════════════════════
⌗ Tags: #linux #penetration_testing #cybersecurity #thehackerslabs
Medium
Buda — Write-Up (The Hackers Labs)
En este write-up se documenta la resolución completa de la máquina Buda de The Hackers Labs. El laboratorio combina técnicas clásicas de…
33 views
Daily Writeups
⤷ Title: Why Blocking Ports Isn’t Enough When Names Tell the Story
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 09:55:35 GMT
════════════════════════
⌗ Tags: #technology #network_security #ethical_hacking #linux #cybersecurity
Medium
Why Blocking Ports Isn’t Enough When Names Tell the Story
Security teams love closed ports.
30 views
Daily Writeups
⤷ Title: Understanding LLMNR & NBT-NS Poisoning in Active Directory (Hands-on Learning)
════════════════════════
𐀪 Author: Krish Gupta
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:38:58 GMT
════════════════════════
⌗ Tags: #ntlm_relay #active_directory #ntlmv2 #red_teaming #ethical_hacking
Medium
Understanding LLMNR & NBT-NS Poisoning in Active Directory (Hands-on Learning)
Active Directory environments are still widely used in organizations — and with that come some legacy protocols that can silently…
30 views
Daily Writeups
⤷ Title: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data (Portswigger Lab)
════════════════════════
𐀪 Author: Rachael Muga
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #sql_injection #information_retrieval #sql_where_clause #portswigger_lab #sql_injection_attack
Medium
SQL injection vulnerability in WHERE clause allowing retrieval of hidden data (Portswigger Lab)
A step-by-step walkthrough showing how SQL injection can be used to manipulate WHERE clause logic and access unreleased data.
35 views
Daily Writeups
⤷ Title: Web Security SQL Injection (Portswigger Labs)
════════════════════════
𐀪 Author: Rachael Muga
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:55:08 GMT
════════════════════════
⌗ Tags: #sql_injection_portswigger #portswigger_lab #portswigger #sql #sql_injection
Medium
Web Security SQL Injection (Portswigger Labs)
This is a living outline of my SQL injection learning journey using PortSwigger labs, with individual walkthroughs added as I complete…
55 views
Daily Writeups
⤷ Title: Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 15:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:30:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Security #Command Injection #Coolify #CVE_2025_64419 #CVE_2025_64424 #DevOps #Self_Hosting #SSH Key Theft
Daily CyberSecurity
Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access
The self-hosting community is on high alert following the disclosure of three critical vulnerabilities in Coolify, the open-source platform designed to simplify application deployment. Security re…
31 views
Daily Writeups
⤷ Title: The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 08:05:04 +0000
════════════════════════
⌗ Tags: #Technology #$230B Valuation #AI Infrastructure #Colossus Supercomputer #Elon Musk #GPU Cluster #Grok 5 #nvidia #Series E Funding #Tech News 2026 #xAI
Daily CyberSecurity
The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters
Elon Musk’s artificial intelligence company, xAI, has announced the completion of a $20 billion Series E funding round in an official press release. The investors include Valor Equity Partners, Fi…
18 views
Daily Writeups
⤷ Title: The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 07:58:12 +0000
════════════════════════
⌗ Tags: #Technology #Apple #battery drain #Certificate Error #gatekeeper #Logi Options+ #Logitech #Mac Troubleshooting #macOS #MX Master #Tech News 2026
Daily CyberSecurity
The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings
If you use a Logitech mouse together with the companion software Logi Options+, you may have noticed that some settings have stopped working. The cause is surprisingly mundane: Logitech failed to …
24 views
Daily Writeups
⤷ Title: Two Requests, One Bug: How Race Conditions Break Server Security
════════════════════════
𐀪 Author: Cybernight
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 11:08:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #owasp_top_10 #cybersecurity #bug_bounty
Medium
Two Requests, One Bug: How Race Conditions Break Server Security
Imagine triggering the same security-sensitive action multiple times at once. Most of the time, nothing happens. But occasionally, the…
32 views
Daily Writeups
⤷ Title: OTP Bypass in Email Verification via Response Manipulation During 2FA Setup Leading to Pre-Account…
════════════════════════
𐀪 Author: 1yz02
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 10:06:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #bug_bounty_tips #account_takeover #bug_bounty_hunting #bug_bounty
Medium
OTP Bypass in Email Verification via Response Manipulation During 2FA Setup Leading to Pre-Account…
Hi Hackers,
My name is Yahya Hammam, and I am a Bug Hunter.
30 views
Daily Writeups
⤷ Title: DOM XSS Lab 3 & 4: Anatomy of document.write and innerHTML Attacks(Portswigger)
════════════════════════
𐀪 Author: Sanjivani Dobhal
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 11:48:47 GMT
════════════════════════
⌗ Tags: #hacking #portswigger_lab #xss_attack #xss_vulnerability #portswigger
Medium
DOM XSS Lab 3 & 4: Anatomy of document.write and innerHTML Attacks(Portswigger)
The Key Terms:
15 views
Daily Writeups
⤷ Title: The “Unzip” of Death: Why Using Your Old WinRAR Is a Dangerous Trap
════════════════════════
𐀪 Author: Shadhujan Jeyachandran
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 11:39:18 GMT
════════════════════════
⌗ Tags: #infosec #phishing #cybersecurity #zero_day #hacking
Medium
The “Unzip” of Death: Why Using Your Old WinRAR Is a Dangerous Trap
We ignored the license pop-up for 20 years. Now, hackers are selling an $80,000 exploit that weaponizes the “Extract Here” button.
16 views
Daily Writeups
⤷ Title: Walkthrough: Retrieving Hidden Data with SQL Injection
════════════════════════
𐀪 Author: Miftahunnaufal Hidayat
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 10:45:13 GMT
════════════════════════
⌗ Tags: #hacking
Medium
Walkthrough: Retrieving Hidden Data with SQL Injection
This lab from PortSwigger is a classic introduction to SQL injection. The objective is simple: manipulate a database query to reveal…
31 views
Daily Writeups
⤷ Title: Ledger Crypto Wallet Customer Data Breach via Global-e
════════════════════════
𐀪 Author: Ted Quek
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 10:36:21 GMT
════════════════════════
⌗ Tags: #hacking #cryptocurrency #cybersecurity
Medium
Ledger Crypto Wallet Customer Data Breach via Global-e
Ledger’s Latest Data Breach: What Happened, What It Really Means, and What Users Should Do
15 views