Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 10:26:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: Finding IDORs with Burp Suite: Real-World Examples That Actually Work
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:42:23 GMT
════════════════════════
⌗ Tags: #hacking #vulnerability #bug_bounty #infosec #pentesting
Medium
👉 Finding IDORs with Burp Suite: Real-World Examples That Actually Work
🔍 Finding IDORs with Burp Suite (Real-World Examples)
33 views
Daily Writeups
⤷ Title: How I Found a Full Team Takeover Vulnerability Through a Simple ID Exchange
════════════════════════
𐀪 Author: Abhishek sharma
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:19:22 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #broken_access_control #bug_bounty
Medium
How I Found a Full Team Takeover Vulnerability Through a Simple ID Exchange
Introduction
27 views
Daily Writeups
⤷ Title: 20 Real-World File Upload Bypass Tricks Beyond php.jpg: Step-by-Step Guide for Pentesters
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:01:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #hacking #bypass
Medium
20 Real-World File Upload Bypass Tricks Beyond php.jpg: Step-by-Step Guide for Pentesters
Ever uploaded “shell.php.jpg” and instantly got blocked? Yeah, you’re not alone. File upload restrictions are the bane of every bug bounty…
22 views
Daily Writeups
⤷ Title: 2FA Bypass via OTP Reuse Across Multiple Authentication Flows
════════════════════════
𐀪 Author: rootxJeet
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:45:31 GMT
════════════════════════
⌗ Tags: #otp_bypass #cybersecurity #2fa_bypass #bug_bounty #authentication
Medium
2FA Bypass via OTP Reuse Across Multiple Authentication Flows
Hello everyone, I’m Jeet. I used to hunt bugs regularly, but due to some personal reasons I couldn’t stay consistent for a while. Now I’m…
16 views
Daily Writeups
⤷ Title: Account Takeover using Improper Authorization in “Check Availability” Feature
════════════════════════
𐀪 Author: Ronak Patel
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:21:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #bug_bounty #account_takeover
Medium
Account Takeover using Improper Authorization in “Check Availability” Feature
Hello Guys!!!!
32 views
Daily Writeups
⤷ Title: Active Session Hijacking via Authentication session_id Exposed in URL
════════════════════════
𐀪 Author: Sohan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:07:11 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bug_bounty #api_penetration_testing #cybersecurity #security
Medium
Active Session Hijacking via Authentication session_id Exposed in URL
Yo hackers! I’m back with another interesting bug write-up 😈🔥
 Today’s issue is about session hijacking caused by an authentication…
13 views
Daily Writeups
⤷ Title: GraphQL Root Operation Types
════════════════════════
𐀪 Author: Shivam Bathla
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 05:55:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #information_technology #graphql
Medium
GraphQL Root Operation Types
Let’s take a look at the fundamental operations that you get in GraphQL!
9 views
Daily Writeups
⤷ Title: Prompt Injection: Defenses Teams Actually Ship
════════════════════════
𐀪 Author: Vectorlane
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:31:00 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #llm_security #application_security #llmops #ai_agents_in_action
Medium
Prompt Injection: Defenses Teams Actually Ship
Tool-using LLMs are powerful — and painfully easy to steer. Here’s the layered, real-world playbook teams are deploying to keep agents…
15 views
Daily Writeups
⤷ Title: Your Agent Has Git. Now It’s a Perimeter
════════════════════════
𐀪 Author: Hash Block
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:31:00 GMT
════════════════════════
⌗ Tags: #devops #llm_security #ai_agents_in_action #software_engineering #application_security
Medium
Your Agent Has Git. Now It’s a Perimeter
Why tool access — not prompts — is the new boundary, and how to design Git-enabled agents that don’t turn your repo into an incident.
11 views
Daily Writeups
⤷ Title: H3C CVM auth bypass & information disclosure
════════════════════════
𐀪 Author: suicidal_teddy
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:48:18 GMT
════════════════════════
⌗ Tags: #zero_day_vulnerability #hacking #exploit #poc
Medium
H3C CVM auth bypass & information disclosure
Here is a narrative based on your findings.
14 views
Daily Writeups
⤷ Title: As always in every penetration testing engagements we start by reconnaissance and information…
════════════════════════
𐀪 Author: Cyb0rgBytes
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:01:04 GMT
════════════════════════
⌗ Tags: #hacking #ctf_walkthrough #pentesting #infosec #cybersecurity
Medium
As always in every penetration testing engagements we start by reconnaissance and information…
We can achieve that by using various of tools and techniques to obtain foothold on the target, by using enumeration, scanning and other…
16 views
Daily Writeups
⤷ Title: LOGICAL LIMITATIONS OF AI MODELS IN THREAT INTELLIGENCE
════════════════════════
𐀪 Author: Rakesh Krishnan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:57:02 GMT
════════════════════════
⌗ Tags: #threat_intelligence #llm #artificial_intelligence #cybersecurity #infosec
Medium
LOGICAL LIMITATIONS OF AI MODELS IN THREAT INTELLIGENCE
NOTE: This is an experimental overview of various Threat Intelligence parameters designed to evaluate the performance of AI Agents (LLM…
15 views
Daily Writeups
⤷ Title: TryHackMe SEC1 vs COMPTIA Sec+ vs HTB CJCA
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:13:32 GMT
════════════════════════
⌗ Tags: #technology #tech #infosec #tryhackme #cybersecurity
Medium
TryHackMe SEC1 vs COMPTIA Sec+ vs HTB CJCA
For decades, the path to a cybersecurity career was linear: buy a 600-page textbook, memorize port numbers and acronyms, pass a…
20 views
Daily Writeups
⤷ Title: Authentication and Authorization in 2026: A Practical Overview of the Technologies
════════════════════════
𐀪 Author: Anton Minin Baranovskii
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:12:38 GMT
════════════════════════
⌗ Tags: #authorization #access_control #product_design #infosec #authentication
Medium
Authentication and Authorization in 2026: A Practical Overview of the Technologies
Authentication and authorization are no longer just technical components. They define trust boundaries, risk distribution, and failure…
25 views
Daily Writeups
⤷ Title: Bypassing Disabled PHP Functions via File Upload (LD_PRELOAD Technique)
════════════════════════
𐀪 Author: Omarelsayedkhalef
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:45:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #ctf #tryhackme #web_exploitation
Medium
Bypassing Disabled PHP Functions via File Upload (LD_PRELOAD Technique)
Reconnaissance & Initial Access The assessment started with basic reconnaissance using Nmap, which revealed an HTTP service running on the…
33 views
Daily Writeups
⤷ Title: Monitoring AWS Logins
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:35:04 GMT
════════════════════════
⌗ Tags: #tryhackme #aws #tryhackme_writeup #tryhackme_walkthrough #aws_login
Medium
Monitoring AWS Logins
Explore AWS authentication, common IAM threats, and SIEM detection options.
27 views
Daily Writeups
⤷ Title: The Future of Cybersecurity Will Be Written by Hackers and Quantum Computers
════════════════════════
𐀪 Author: Darksynthhacker
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:48:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #artificial_intelligence #technology #quantum_computing #cybersecurity
Medium
The Future of Cybersecurity Will Be Written by Hackers and Quantum Computers
By [Thetrustedhacker] | Cybersecurity | Future Tech | Quantum | Ethical Hacking
18 views
Daily Writeups
⤷ Title: How OAuth 2.0 Actually Works Behind the Scenes
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:31:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #ethical_hacking #information_technology #web_development
Medium
How OAuth 2.0 Actually Works Behind the Scenes
Authorization Code Flow — A Technical Deep Dive
17 views
Daily Writeups
⤷ Title: Why Quantum Computing Will Force Companies to Hire Professional Hackers
════════════════════════
𐀪 Author: Darksynthhacker
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:31:52 GMT
════════════════════════
⌗ Tags: #quantum_computing #future_of_security #technology #cybersecurity #ethical_hacking
Medium
Why Quantum Computing Will Force Companies to Hire Professional Hackers
Quantum computing isn’t a distant theory anymore.
26 views
Daily Writeups
⤷ Title: JWT in Spring Boot: Supporting Both Users and Services the Right Way
════════════════════════
𐀪 Author: Sriram Mahalingam
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 07:40:03 GMT
════════════════════════
⌗ Tags: #software_architecture #backend_development #api_security #spring_boot #jwt
Medium
JWT in Spring Boot: Supporting Both Users and Services the Right Way
Why user tokens and service tokens are not the same — and how to design for both safely in Spring Boot
28 views