Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: SentinelOne Unmasks Exploitation of FortiGate Appliances as Gateways to Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:00:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #CVE_2025_59718 #CVE_2026_24858 #cybersecurity #FortiGate #infosec #lateral movement #network_security #SentinelOne DFIR #threat intelligence
Daily CyberSecurity
SentinelOne Unmasks Exploitation of FortiGate Appliances as Gateways to Network Takeover
SentinelOne DFIR reveals how attackers exploit FortiGate NGFW flaws to extract credentials, abuse Active Directory, and establish persistent network access.
31 views
Daily Writeups
⤷ Title: Tenable Uncovers ‘LeakyLooker’ Flaws Turning Google Looker Studio into a Cloud Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 13:00:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Business Intelligence Security #Cloud Security #Cross_Tenant Vulnerability #cybersecurity #data exfiltration #GCP Security #LeakyLooker #Looker Studio #sql injection #Tenable Research
Daily CyberSecurity
Tenable Uncovers 'LeakyLooker' Flaws Turning Google Looker Studio into a Cloud Backdoor
Tenable exposes "LeakyLooker"—9 cross-tenant flaws in Google Looker Studio that let hackers manipulate and exfiltrate GCP data. Google has patched them.
18 views
Daily Writeups
⤷ Title: The Danger of Over-Permissive File Shares
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:21:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #hacking #penetration_testing #bug_bounty_writeup
Medium
📁The Danger of Over-Permissive File Shares
Another box, another hack. This time we’re making our way through Hack The Box machine Escape. Let’s see where this one takes us.
18 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #28: Boolean-Based Blind SQL Injection — Extracting Data One True/False at a…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:19:49 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #penetration_testing #bug_bounty #technology
Medium
“Bug Bounty Bootcamp #28: Boolean-Based Blind SQL Injection — Extracting Data One True/False at a Time”
When the application only answers “yes” or “no,” you’d think data extraction is impossible. Think again. Learn to play 20 Questions with…
17 views
Daily Writeups
⤷ Title: Single-endpoint Race Conditions
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:19:08 GMT
════════════════════════
⌗ Tags: #privilege_escalation #business_logic #bug_bounty_tips #bug_bounty #race_condition
Medium
Single-endpoint Race Conditions
How a Single Endpoint Race Condition Allowed Admin Access via Email Update.
17 views
Daily Writeups
⤷ Title: API Hunting to Employee PII Data
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:17:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #infosec #technology #hacking
Medium
API Hunting to Employee PII Data
Fuzzing on APIs
19 views
Daily Writeups
⤷ Title: 8. Second-Order Vulnerabilities: A Rare Bug -> $$$
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:12:55 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #bug_bounty_tips
Medium
8. Second-Order Vulnerabilities: A Rare Bug -> $$$
Most vulnerabilities happen immediately.
37 views
Daily Writeups
⤷ Title: I Hacked Your Account with a 6-Digit PIN: The Brute-Force Nightmare You Need to Fix
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:10:23 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty_writeup #hacking #bug_bounty
Medium
💀 I Hacked Your Account with a 6-Digit PIN: The Brute-Force Nightmare You Need to Fix
TL;DR: Your Quick & Dirty Guide
18 views
Daily Writeups
⤷ Title: 8. Second-Order Vulnerabilities: A Rare Bug -> $$$
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:12:53 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #bug_bounty_tips
Medium
8. Second-Order Vulnerabilities: A Rare Bug -> $$$
Most vulnerabilities happen immediately.
13 views
Daily Writeups
⤷ Title: Stack Your Arsenal: Logic Bugs That Turn Into $$$
════════════════════════
𐀪 Author: MahmoudKroush (xgoon)
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:06:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #logic_bug #bug_bounty #business_logic_bug #bug_hunting
Medium
Stack Your Arsenal: Logic Bugs That Turn Into $$$
بسم الله، والصلاة والسلام على رسول الله الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي…
13 views
Daily Writeups
⤷ Title: Identifying OWASP top 10 API vulnerabilities in crAPI(Walkthrough)
════════════════════════
𐀪 Author: Jei Ess
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 13:14:20 GMT
════════════════════════
⌗ Tags: #api #cybersecurity #hacking #web_development #bug_bounty
Medium
Identifying OWASP top 10 API vulnerabilities in crAPI(Walkthrough)
Ahoy fellow hunters🏹;
9 views
Daily Writeups
⤷ Title: You Are Easier To Hack. This Is How You Protect Yourself.
════════════════════════
𐀪 Author: Md.Imad
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:56:01 GMT
════════════════════════
⌗ Tags: #hacking #writing #artificial_intelligence #ai #technology
Medium
You Are Easier To Hack. This Is How You Protect Yourself.
Believe me, you are no smarter than a hacker, so protect yourself with these actions.
17 views
Daily Writeups
⤷ Title: THM - Detecting AD Initial Access
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:38:39 GMT
════════════════════════
⌗ Tags: #hacking #security #tech #technology #cybersecurity
Medium
THM - Detecting AD Initial Access
A writeup for the “Detecting AD Initial Access” investigation challenge on TryHackMe.
13 views
Daily Writeups
⤷ Title: Active Directory Pentesting Series-Part 3
════════════════════════
𐀪 Author: Deepansh hooda
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:32:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #hacking #ad_pentesting
Medium
Active Directory Pentesting Series-Part 3
Initial Attack Vectors in Active Directory Environments
14 views
Daily Writeups
⤷ Title: GMA Integrated News and GMA Playground YouTube channels hacked altogether to promote a crypto scam…
════════════════════════
𐀪 Author: ZE's Remakes
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:28:44 GMT
════════════════════════
⌗ Tags: #hacking #youtube #gma_network #crypto_scam
Medium
GMA Integrated News and GMA Playground YouTube channels hacked altogether to promote a crypto scam via live stream [UPDATE: STREAMS…
It’s one of the worst nightmares of the Gozon media empire on social media this year.
12 views
Daily Writeups
⤷ Title: From Recon to Root: Mastering the DC-2 CTF Challenge
════════════════════════
𐀪 Author: Anupa Fernando
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:14:30 GMT
════════════════════════
⌗ Tags: #ctf #information_security #cybersecurity #linux_tutorial #hacking
Medium
From Recon to Root: Mastering the DC-2 CTF Challenge
Welcome back dear reader, I hope you have enjoyed my previous article regarding the DC-1 CTF Challenge if not I highly recommend you to…
15 views
Daily Writeups
⤷ Title: The 2026 Pentesting Roadmap: From Beginner to Hired in 8 Steps (Updated)
════════════════════════
𐀪 Author: Vidar Frostbjorn
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:10:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #pentesting #penetration_testing #ethical_hacking
Medium
The 2026 Pentesting Roadmap: From Beginner to Hired in 8 Steps (Updated)
A beginner-friendly guide to fast-track your journey and master the skills needed to land a penetration testing job
16 views
Daily Writeups
⤷ Title: The Complete Guide to Ethical Web Scraping
════════════════════════
𐀪 Author: C. L. Beard
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 13:41:00 GMT
════════════════════════
⌗ Tags: #hacking #business_strategy #black_hat_seo #web_scraping #ethical_hacking
Medium
The Complete Guide to Ethical Web Scraping
And what not to do
14 views
Daily Writeups
⤷ Title: CyCTF Luxor | cyauth (Reverse Engineering Writeup)
════════════════════════
𐀪 Author: Mohamed Tarek
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 13:15:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #reverse_engineering #ctf_writeup #infosec #ctf_walkthrough
Medium
CyCTF Luxor | cyauth (Reverse Engineering Writeup)
Challenge name : cyauth
25 views
Daily Writeups
⤷ Title: 3 Pentest Certifications I Wish I’d Taken Sooner
════════════════════════
𐀪 Author: Vidar Frostbjorn
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:15:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #pentesting #certification #technology
Medium
3 Pentest Certifications I Wish I’d Taken Sooner
The OSCP and GPEN are on every beginner’s radar, but these overlooked certifications have proved even more valuable to my career…
24 views
Daily Writeups
⤷ Title: Microsoft Graph API Attack Surface: OAuth Flows, Abused Endpoints, and What Defenders Miss
════════════════════════
𐀪 Author: Dzianis Skliar
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:04:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #recon
Medium
Microsoft Graph API Attack Surface: OAuth Flows, Abused Endpoints, and What Defenders Miss
One stolen client secret. No MFA, no Conditional Access, no endpoint to compromise — just a valid OAuth token and an API that hands you the…
29 views