Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: 15 Copy-Paste cURL One-Liners to Test an API for IDOR, Auth Bypass and CORS
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 14:47:41 GMT
════════════════════════
⌗ Tags: #software_development #bug_bounty #cybersecurity #ethical_hacking #programming
Medium
15 Copy-Paste cURL One-Liners to Test an API for IDOR, Auth Bypass and CORS
No Burp Suite. No fancy setup. Just your terminal and 15 commands that find the three bugs that pay the most. 🧪
13 views
Daily Writeups
⤷ Title: The File Uploaded Successfully. That Was the First Mistake.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 15:23:00 GMT
════════════════════════
⌗ Tags: #coding #ethical_hacking #technology #programming #cybersecurity
Medium
The File Uploaded Successfully. That Was the First Mistake.
How file-upload validation, content-type confusion, storage design, and unsafe processing turn an ordinary feature into a security boundary…
45 views
Daily Writeups
⤷ Title: How to Discover Hidden API Endpoints Using JavaScript Analysis
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:33:32 GMT
════════════════════════
⌗ Tags: #hacking #ai #programming #cybersecurity #bug_bounty
Medium
How to Discover Hidden API Endpoints Using JavaScript Analysis
Hi, I’m Vipul — the human behind TheHackersLog.
8 views
Daily Writeups
⤷ Title: The Server Fetched the URL. I Never Expected It to Reach That Network.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:23:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #programming #technology #coding
Medium
The Server Fetched the URL. I Never Expected It to Reach That Network.
How server-side request forgery turns seemingly harmless URL-fetching features into unexpected access to internal services, cloud metadata…
16 views
Daily Writeups
⤷ Title: 15 Programs That Actually Pay Fast (And How to Find More Like Them)
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 14:10:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #software_development #ethical_hacking #bug_bounty
Medium
15 Programs That Actually Pay Fast (And How to Find More Like Them)
Not fast replies — fast money. 15 real bug bounty programs, ranked by how long hunters actually wait to get paid. 💸
9 views
Daily Writeups
⤷ Title: How to Turn Any Old Router Into a $20 SOC (My Exact Config)
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:41:20 GMT
════════════════════════
⌗ Tags: #hacking #soc #cybersecurity #diy_electronics #programming
Medium
How to Turn Any Old Router Into a $20 SOC (My Exact Config)
I have a $300 ASUS router in my closet. It’s unplugged. I’m using a $26 yellow box that outperforms it every day.
14 views
Daily Writeups
⤷ Title: The Internet of Things is Held Together With Duct Tape and Default Passwords[Badly]
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:17:51 GMT
════════════════════════
⌗ Tags: #information_security #programming #iot #hacking #cybersecurity
Medium
The Internet of Things is Held Together With Duct Tape and Default Passwords[Badly]
My smart light bulb tried to mine crypto last Tuesday.
14 views
Daily Writeups
⤷ Title: The API Accepted Fields I Never Expected It to Accept
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:05:32 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #programming #coding #cybersecurity
Medium
The API Accepted Fields I Never Expected It to Accept
How mass assignment turns ordinary JSON fields into privilege escalation, unauthorized account changes, and broken trust between clients…
24 views
Daily Writeups
⤷ Title: The Request Was Valid. The Business Logic Wasn’t.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:28:21 GMT
════════════════════════
⌗ Tags: #programming #technology #cybersecurity #coding #ethical_hacking
Medium
The Request Was Valid. The Business Logic Wasn’t.
How attackers exploit workflow assumptions, inconsistent state transitions, pricing mistakes, and missing server-side rules to make…
59 views
Daily Writeups
⤷ Title: OpenCode Hacked: User credentials leaked
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 09:09:53 GMT
════════════════════════
⌗ Tags: #software_development #hacking #software #programming #software_engineering
Medium
OpenCode Hacked: User credentials leaked
A security incident that touches only 1.4 percent of users can still feel large when the product sits at the intersection of code and…
43 views