Daily Writeups
@Daily_Writeups
3.77K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.77K subscribers
Daily Writeups
⤷ Title: Android Uygulamalarında IPC ve Bileşen Güvenliği
════════════════════════
𐀪 Author: Aybora Ünveren
════════════════════════
ⴵ Time: Mon, 25 May 2026 19:00:22 GMT
════════════════════════
⌗ Tags: #android_security #penetration_testing #cybersecurity #mobile_security #bug_bounty
Medium
Android Uygulamalarında IPC ve Bileşen Güvenliği
Bu yazımda Android uygulamalarında sıkça karşılaşılan bileşen ve IPC güvenlik zafiyetlerini ele alacağım. Bu zafiyetler; tek bir kullanıcı…
12 views
Daily Writeups
⤷ Title: How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
════════════════════════
𐀪 Author: Rajagiri Sai Ganesh
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:55:39 GMT
════════════════════════
⌗ Tags: #android_security #java_security #bug_bounty #google_vrp #cryptography
Medium
How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
Unauthorised KeyManager modification via Java reflection bypass — enabling cryptographic registry tampering inside Google’s ecosystem
35 views
Daily Writeups
⤷ Title: Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 01:39:00 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #Android security #CVE_2025_48595 #Framework Vulnerability #Google Patches #zero_day #Zero_Day Exploit
Daily CyberSecurity
Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
Google recently released a critical security patch to address a dangerous Android zero day flaw. Specifically, this emergency update arrives as part of the broader system release. Cybercriminals a…
13 views
Daily Writeups
⤷ Title: When One Line of Code Becomes a Global Risk: Lessons From a Microsoft Android App Security Exposure
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 09:59:06 GMT
════════════════════════
⌗ Tags: #devsecops #mobile_security #application_security #cybersecurity #android_security
Medium
When One Line of Code Becomes a Global Risk: Lessons From a Microsoft Android App Security Exposure
In software development, even the smallest coding oversight can have far-reaching consequences. A recently disclosed security issue…
19 views
Daily Writeups
⤷ Title: Finding an Unintended Privilege Escalation While Solving Mobile Hacking Lab’s Food Store Challenge
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 15:04:35 GMT
════════════════════════
⌗ Tags: #bug_bounty #reverse_engineering #android_security #mobileapplicationsecurity #cybersecurity
Medium
Finding an Unintended Privilege Escalation While Solving Mobile Hacking Lab’s Food Store Challenge
While hunting for SQL Injection, I accidentally became the CEO of the Food Store.
31 views
Daily Writeups
⤷ Title: Mastering Frida: Solving the OWASP MSTG Android Lab Challenges
════════════════════════
𐀪 Author: Basithmohammedali
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:37:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #mobile_security #owasp_top_10 #frida #android_security
Medium
Mastering Frida: Solving the OWASP MSTG Android Lab Challenges
Introduction
21 views
Daily Writeups
⤷ Title: Deep Link Hijacking leads to Account Takeover
════════════════════════
𐀪 Author: Rawan Saeed
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 14:36:48 GMT
════════════════════════
⌗ Tags: #deeplink #bug_bounty #cybersecurity #android_security #penetration_testing
Medium
Deep Link Hijacking leads to Account Takeover
Deep links are widely used in mobile applications to improve the user experience by opening specific pages directly inside the app…
17 views
Daily Writeups
⤷ Title: 1-Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
10 views
Daily Writeups
⤷ Title: Account Takeover via Misconfigured OAuth in Android
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 13:04:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #android_security #bug_bounty #oauth #mobile_security
Medium
Account Takeover via Misconfigured OAuth in Android
TL;DR: Two Android apps using Auth0 left redirect URIs in their allowlist that nothing on Android actually owned. PKCE wasn’t enforced…
13 views
Daily Writeups
⤷ Title: One Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
12 views