Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Werkzeug Debugger Authentication Bypass via Client-Side Response Manipulation
════════════════════════
𐀪 Author: AAKASH SHARMA
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 09:28:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #web_security
Medium
Werkzeug Debugger Authentication Bypass via Client-Side Response Manipulation
imagine
10 views
Daily Writeups
⤷ Title: Prompt Injection Toolkit: 25 Payloads & Techniques for Mastering AI Pentesting
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 08:34:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity #bug_bounty #machine_learning
Medium
Prompt Injection Toolkit: 25 Payloads & Techniques for Mastering AI Pentesting
Ever tried breaking an AI chatbot with a ‘please ignore all previous instructions’ prompt, only to realize it’s trickier than you thought…
17 views
Daily Writeups
⤷ Title: How to Read a Web App Like a Hacker (Even If You’re Not Technical Yet)
════════════════════════
𐀪 Author: Er Dhaval Ramani
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 05:14:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cyber_security_awareness #cybersecurity #bug_bounty_writeup
Medium
How to Read a Web App Like a Hacker (Even If You’re Not Technical Yet)
When I first tried to understand bug bounty, I honestly thought I was too early to even look at real websites.
13 views
Daily Writeups
⤷ Title: CyberLessons101: Dockerized CTF Challenge Index.
════════════════════════
𐀪 Author: Josh Beck
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:56:16 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #bug_bounty #ctf_writeup
Medium
CyberLessons101: Dockerized CTF Challenge Index.
Direct Link First: (https://cyberlessons101.com)
7 views
Daily Writeups
⤷ Title: When “Draft” Doesn’t Mean Private: Finding an IDOR in an Unpublished Resource
════════════════════════
𐀪 Author: AKU
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:02:18 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #idor #hacking #web_development
Medium
When “Draft” Doesn’t Mean Private: Finding an IDOR in an Unpublished Resource
When we think about draft content in web applications, there’s an unspoken assumption:  If something isn’t published, it’s private.
10 views
Daily Writeups
⤷ Title: WhatWeb Guide: Fingerprinting and Recognition for Bug Hunting
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 00:01:03 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #technology #cybersecurity #bug_bounty
Medium
WhatWeb Guide: Fingerprinting and Recognition for Bug Hunting
Master WhatWeb to identify web technologies, detect vulnerabilities, and optimize your recognition in Bug Bounty.
6 views
Daily Writeups
⤷ Title: How a Simple “Trust Gap” Logic Flaw Earned Me $200,000 and Inspired a New AI Security Engine
════════════════════════
𐀪 Author: Muhammad Arslan Akhtar
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 22:49:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #cybersecurity #machine_learning #productized_services
Medium
How a Simple “Trust Gap” Logic Flaw Earned Me $200,000 and Inspired a New AI Security Engine
By Muhammad Arslan Akhtar
8 views
Daily Writeups
⤷ Title: Command Injection via PATH Environment Variable in Clawdbot Docker Sandbox (CVE-2026–24763)
════════════════════════
𐀪 Author: Berk Dedekargınoğlu
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 11:46:53 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurit #application_security #red_team
Medium
Command Injection via PATH Environment Variable in Clawdbot Docker Sandbox (CVE-2026–24763)
Introduction
11 views
Daily Writeups
⤷ Title: Application Security
════════════════════════
𐀪 Author: Sude E.
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 17:02:33 GMT
════════════════════════
⌗ Tags: #data_sec #application_security #appsec #owasp_top_10 #security
Medium
Application Security
Modern yazılım mimarilerinde en küçük bir güvenlik açığı, tüm sistemi riske atmaya yeterlidir.
8 views
Daily Writeups
⤷ Title: Function Level Authorization (BFLA) — When Users Become Admins
════════════════════════
𐀪 Author: Emmanuelnnebedum
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 15:55:31 GMT
════════════════════════
⌗ Tags: #api #owasp_api_security_top_10 #information_security #application_security #security
Medium
Function Level Authorization (BFLA) — When Users Become Admins
owasp-api-5-bfla-explained
9 views
Daily Writeups
⤷ Title: How To Bypass 403
════════════════════════
𐀪 Author: FeritÖzner
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 14:49:01 GMT
════════════════════════
⌗ Tags: #bypass #application_security #cybersecurity #web_security #403_forbidden
Medium
How To Bypass 403
Introduction
12 views
Daily Writeups
⤷ Title: Why API Security Is Critical for PCI Compliance (Lessons from APISec Uni)
════════════════════════
𐀪 Author: Khadijat Suleman
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 13:29:27 GMT
════════════════════════
⌗ Tags: #application_security #api #pci_dss #api_security #pci_dss_compliance
Medium
Why API Security Is Critical for PCI Compliance (Lessons from APISec Uni)
Over a decade ago, Payment systems were closed and slow to change. But all these changed in 2022 when PCI released version 4.0 of the Data…
8 views
Daily Writeups
⤷ Title: API PENETRATION TESTING ON VULNBANK PART2
════════════════════════
𐀪 Author: Chinaza Emmanuela Obidike
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 08:01:03 GMT
════════════════════════
⌗ Tags: #api_security #owasp #api_development #api #application_security
Medium
API PENETRATION TESTING ON VULNBANK PART2
This details the final phase of a comprehensive security assessment of the VulnBank application.
11 views
Daily Writeups
⤷ Title: The Agentic AI Security Model That Actually Holds Up
════════════════════════
𐀪 Author: Nexumo
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 01:31:02 GMT
════════════════════════
⌗ Tags: #software_architecture #devops #llm_agent #ai_security #application_security
Medium
The Agentic AI Security Model That Actually Holds Up
A practical blueprint for securing AI agents with permissions, policies, and proof — so tool use becomes auditable, safe, and…
11 views
Daily Writeups
⤷ Title: From One Mutation to a Full Service Outage: A GraphQL DoS Story
════════════════════════
𐀪 Author: Kayra Öksüz
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 14:41:09 GMT
════════════════════════
⌗ Tags: #application_security #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity
Medium
From One Mutation to a Full Service Outage: A GraphQL DoS Story
Sometimes the most dangerous vulnerabilities do not leak any data.
9 views
Daily Writeups
⤷ Title: API Security: PCI DSS Compliance
════════════════════════
𐀪 Author: Prettycybergirl
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 13:33:20 GMT
════════════════════════
⌗ Tags: #application_security #pci_dss #owasp_api_security_top_10 #api_security #pci_dss_compliance
Medium
API Security: PCI DSS Compliance
As part of my API security learning from Cybersafe foundation, I recently reviewed a vulnerable banking application(vulnbank) with a focus…
8 views
Daily Writeups
⤷ Title: How SSRF Becomes Cloud Account Compromise (From a Red Team View)
════════════════════════
𐀪 Author: Krutik Thakar — Secure Developer | VAPT Associate
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 12:57:19 GMT
════════════════════════
⌗ Tags: #devops #red_team #cloud_security #ssrf #application_security
Medium
How SSRF Becomes Cloud Account Compromise (From a Red Team View)
A practical guide for developers and DevOps engineers to stop cloud takeovers before they start
14 views
Daily Writeups
⤷ Title: Ottergram writeup (Bugforge)
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 10:28:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hacking #ctf_writeup #bugforge
Medium
Ottergram writeup (Bugforge)
🍺 Quick message to readers: if my writeups help you, please consider a small donation to my buymeacoffee link here. This is not required…
7 views
Daily Writeups
⤷ Title: Shadow in the core
════════════════════════
𐀪 Author: Progsky
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 10:09:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ethical_hacking
Medium
Shadow in the core
In real life, you may encounter a masked module in the system! Modules are a unifiedmechanism that ensures the legal loading/unloading of…
5 views
Daily Writeups
⤷ Title: Raspberry Pi vs. Arduino vs. Teensy: Which Board Belongs in Your Next Hack?
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 09:05:00 GMT
════════════════════════
⌗ Tags: #teensy #microcontrollers #arduino #esp32 #hacking
Medium
Raspberry Pi vs. Arduino vs. Teensy: Which Board Belongs in Your Next Hack?
The workbench is quiet. The kind of quiet that happens after midnight when everyone else is asleep and you are still awake because a…
4 views
Daily Writeups
⤷ Title: Rent Please Landlord Sim Mod APK
════════════════════════
𐀪 Author: genzvnmod
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 08:56:25 GMT
════════════════════════
⌗ Tags: #rentpleaselandlordsim #gamemods #hacking #genzvnmod #games
Medium
Rent Please Landlord Sim Mod APK
Rent Please Landlord Sim Mod APK mang đến cảm giác quản lý thư giãn đúng nghĩa, phù hợp để giải trí sau những giờ làm việc căng thẳng. Bạn…
7 views