Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How I Accidentally Hacked a Government Payment Portal While Looking for Bugs
════════════════════════
𐀪 Author: LETCHU PKT
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:09:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty_tips #bug_bounty_writeup #cybersecurity #cyber_security_awareness
Medium
How I Accidentally Hacked a Government Payment Portal While Looking for Bugs
Or: What Happens When Demo Files Meet Production Servers (Spoiler: RCE)
37 views
Daily Writeups
⤷ Title: “How I built my own Port Scanner using Python”
════════════════════════
𐀪 Author: Akhilswami
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:52:17 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #python #ethical_hacking #technology
Medium
“How I built my own Port Scanner using Python”
From script kiddie to tool developer — My journey into Python Socket Programming.
45 views
Daily Writeups
⤷ Title: Zero-Click Account Takeover via Organization Invite Abuse
════════════════════════
𐀪 Author: Abhay go
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 19:51:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #web_security #account_takeover #cybersecurity
Medium
Zero-Click Account Takeover via Organization Invite Abuse
Introduction
38 views
Daily Writeups
⤷ Title: Android Content Provider Security: A Pentester’s Deep Dive — Part 1
════════════════════════
𐀪 Author: Mustafa Mohamed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 20:55:41 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #android_security #android_content_providers #application_security
Medium
Android Content Provider Security: A Pentester’s Deep Dive — Part 1
Hi folks! Today, we’re taking a deep dive into Android Content Providers from a security perspective. In this series, we’ll explore common…
33 views
Daily Writeups
⤷ Title: OWASP Juice Shop — BOLA: Unauthorized Basket Access
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:26:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #owasp #application_security
Medium
OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
Vulnerability Overview
23 views
Daily Writeups
⤷ Title: Untitled
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:11:53 GMT
════════════════════════
⌗ Tags: #application_security #web_security #cybersecurity #owasp #penetration_testing
Medium
OWASP Juice Shop — User Enumeration via Forgot Password
This writeup documents a user enumeration vulnerability identified during a security assessment of OWASP Juice Shop. The finding was…
15 views
Daily Writeups
⤷ Title: Proving Grounds: Kevin
════════════════════════
𐀪 Author: SecurityChud
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 20:46:28 GMT
════════════════════════
⌗ Tags: #provinggrounds #hacking #oscp #cybersecurity
Medium
Proving Grounds: Kevin
Below is my write up of the Proving Grounds box called Kevin. This is a windows box that was listed on the lainkusanagi OSCP Practice list…
27 views
Daily Writeups
⤷ Title: Como detectar métodos de injeção user-mode
════════════════════════
𐀪 Author: Gabriel Maciel Ramos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 19:46:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #reverse_engineering #malware #malware_analysis
Medium
Como detectar métodos de injeção user-mode
Um método para permitir a execução de código não autorizado dentro do espaço de endereço de um processo legítimo é a injeção de código em…
23 views
Daily Writeups
⤷ Title: Understanding the Best Darkweb Search Engines and How They Work
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:58:49 GMT
════════════════════════
⌗ Tags: #osint #infosec #cybersecurity #darkweb
Medium
Understanding the Best Darkweb Search Engines and How They Work
Finding information on the dark web is very different from searching the regular internet. Traditional search engines like Google rely on…
25 views
Daily Writeups
⤷ Title: Active Directory Basic Enumeration -TryHackMe Walkthrough
════════════════════════
𐀪 Author: Luqman
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 19:16:28 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf_writeup #cybersecurity #penetration_testing #tryhackme
Medium
Active Directory Basic Enumeration -TryHackMe Walkthrough
📌 Pendahuluan
25 views
Daily Writeups
⤷ Title: Understanding Web Application Logs for Security Investigation
════════════════════════
𐀪 Author: CipherX9F Security
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 19:02:55 GMT
════════════════════════
⌗ Tags: #vapt #web_security #cipherx9f_security #penetration_testing #web_penetration_testing
Medium
Understanding Web Application Logs for Security Investigation
Introduction
22 views
Daily Writeups
⤷ Title: Tryhackme AD: Basic Enumeration Write-Up
════════════════════════
𐀪 Author: Harmonax
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 20:52:56 GMT
════════════════════════
⌗ Tags: #active_directory #red_team #microsoft #pentesting #tryhackme
Medium
Tryhackme AD: Basic Enumeration Write-Up
Enumerasi Active Directory (AD) adalah langkah krusial awal dalam melakukan penetration testing pada jaringan enterprise Microsoft Windows…
32 views
Daily Writeups
⤷ Title: Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 21:58:59 +0000
════════════════════════
⌗ Tags: #Data Breaches #AI #BreachForums #Cal AI #Cyber Attack #Cybersecurity #data breach #Fitness #MyFitnessPal #Vibecodelegend
Hackread
Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users
Cal AI faces data breach claims after hackers post alleged data of 3 million users, including emails, health details, and subscriptions.
26 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with most tags and attributes blocked
════════════════════════
𐀪 Author: mayhack
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:23:24 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #xss_attack #hacking #bug_bounty
Medium
Lab: Reflected XSS into HTML context with most tags and attributes blocked
Challenge Overview
21 views
Daily Writeups
⤷ Title: The Global Advanced Persistent Threat (APT) Landscape: Strategic Evolution, Taxonomic Mapping, and…
════════════════════════
𐀪 Author: Mr_MalMan
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:41:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #war #apt #malware
Medium
The Global Advanced Persistent Threat (APT) Landscape: Strategic Evolution, Taxonomic Mapping, and…
The global cyber threat landscape has reached a critical inflection point, fundamentally altered by the unprecedented velocity of threat…
35 views
Daily Writeups
⤷ Title: Layered Polymorphic String Encryption
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 21:32:31 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #malware #red_team #cybersecurity
Medium
Layered Polymorphic String Encryption
Welcome to this new Medium post! Today, we are talking about a smart way to hide important text inside your implants that I just saw in the…
21 views
Daily Writeups
⤷ Title: From Zero to Domain Admin: Compromising Active Directory in Attacktive Directory (TryHackMe)
════════════════════════
𐀪 Author: razzee
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:38:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #ethical_hacking #active_directory #cybersecurity
Medium
From Zero to Domain Admin: Compromising Active Directory in Attacktive Directory (TryHackMe)
Active Directory environments are one of the most common targets during internal network penetration testing. Misconfigurations in…
15 views
Daily Writeups
⤷ Title: HTB Arctic: Remote Command Execution to JuicyPotato Privesc
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:31:06 GMT
════════════════════════
⌗ Tags: #privilege_escalation #cybersecurity #penetration_testing #hackthebox #capture_the_flag
Medium
HTB Arctic: Remote Command Execution to JuicyPotato Privesc
Conduct a full port scan via nmap:
13 views
Daily Writeups
⤷ Title: Advanced XPath Injection Guide (Authentication Bypass → Data Exfiltration → Blind Extraction)
════════════════════════
𐀪 Author: Raman Gautam | rghx
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:20:05 GMT
════════════════════════
⌗ Tags: #web_development #xpath #cybersecurity #security #penetration_testing
Medium
Advanced XPath Injection Guide (Authentication Bypass → Data Exfiltration → Blind Extraction)
👋 Hi everyone! I’m back again with another deep dive into web application security.
17 views
Daily Writeups
⤷ Title: I Switched Sides: What It’s Like Investigating an Attack Instead of Running One
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:16:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #blue_team #splunk
Medium
I Switched Sides: What It’s Like Investigating an Attack Instead of Running One
Most of my labs so far have been offensive. I’ve brute-forced logins, exploited web applications, replaced binaries in writable…
26 views
Daily Writeups
⤷ Title: Abusing AD-DACL: GenericWrite
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 21:14:15 GMT
════════════════════════
⌗ Tags: #active_directory_attack #active_directory #dacl #penetration_testing
Medium
Abusing AD-DACL: GenericWrite
The GenericWrite permission in Active Directory allows a user to modify all writable attributes of an object, except for properties that…
28 views