Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Active Directory Privilege Escalation: Token Impersonation Attack By Mert Baykal
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:36:57 GMT
════════════════════════
⌗ Tags: #red_team #ethical_hacking #active_directory #cybersecurity #network_security
Medium
Active Directory Privilege Escalation: Token Impersonation Attack By Mert Baykal
In Windows systems, authentication does not always require repeatedly entering credentials. Instead, Windows uses access tokens to…
35 views
Daily Writeups
⤷ Title: CCTV — HackTheBox Writeup
════════════════════════
𐀪 Author: Vishal M
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #ctf_writeup #cybersecurity #pentesting #ethical_hacking #ctf_walkthrough
Medium
CCTV — HackTheBox Writeup
A Beginner-Friendly Full Walkthrough | SQL Injection + Command Injection + Root
44 views
Daily Writeups
⤷ Title: Blurring the Lines: How Iranian State Hackers are Weaponizing RaaS and the Cybercriminal Underground
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:00:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #Check Point Research #Cybercrime #Handala #infosec #Iranian Cyber Espionage #RaaS #Rhadamanthys #State_Sponsored Hackers #threat intelligence #Void Manticore
Daily CyberSecurity
Blurring the Lines: How Iranian State Hackers are Weaponizing RaaS and the Cybercriminal Underground
Check Point Research reveals Iranian state hackers (Void Manticore) are weaponizing RaaS and criminal malware like Rhadamanthys for plausible deniability.
❤1
36 views
Daily Writeups
⤷ Title: Silence of the Hops: The KadNap Botnet Conscripts 14,000 Routers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:00:45 +0000
════════════════════════
⌗ Tags: #Malware #ASUS routers #Black Lotus Labs #botnet #cybersecurity #Doppelgänger #infosec #Kademlia DHT #KadNap #P2P Protocol #threat intelligence
Daily CyberSecurity
Silence of the Hops: The KadNap Botnet Conscripts 14,000 Routers
Black Lotus Labs uncovers KadNap, a stealthy P2P botnet infecting over 14,000 Asus routers to fuel the Doppelgänger dark web proxy network.
17 views
Daily Writeups
⤷ Title: Google Paid Hackers $17 Million in 2025 — Here’s Why
════════════════════════
𐀪 Author: Subhan Ali
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:50:24 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #technology #ethical_hacking #bug_bounty
Medium
Google Paid Hackers $17 Million in 2025 — Here’s Why
How ethical hackers are helping secure the internet (and getting paid for it)
24 views
Daily Writeups
⤷ Title: A Practical Web Pentesting CTF Challenge — Step-by-Step Walkthrough
════════════════════════
𐀪 Author: cryptoshant
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:48:52 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #hacking #ctf #bug_bounty
Medium
A Practical Web Pentesting CTF Challenge — Step-by-Step Walkthrough
Hello everyone, I hope you are doing well and having a wonderful day. Today in this writeup I am going to give you an comprehensive…
15 views
Daily Writeups
⤷ Title: Mapping the Attackers Before Mapping the Application
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:47:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #bug_bounty #cybersecurity #hacking #bug_bounty_tips
Medium
Mapping the Attackers Before Mapping the Application 🎯🌐
Hey there!😁
13 views
Daily Writeups
⤷ Title: SameSite Lax Bypass via Method Override
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:52:40 GMT
════════════════════════
⌗ Tags: #csrf_bypass #bug_bounty #bug_bounty_tips #csrf #csrf_attack
Medium
SameSite Lax Bypass via Method Override
Breaking CSRF protection by abusing method override and SameSite cookie behavior.
11 views
Daily Writeups
⤷ Title: Cracking the Code: The Human Strategy Behind Landing Your Cybersecurity Dream Job
════════════════════════
𐀪 Author: The Daily Cyber News
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:49:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #jobs #technology #hacking #interview
Medium
Cracking the Code: The Human Strategy Behind Landing Your Cybersecurity Dream Job
Getting a job in cybersecurity often feels like trying to crack a highly secured network. You can throw all the technical certifications…
13 views
Daily Writeups
⤷ Title: RuView: The Open-Source System That Sees Through Walls With WiFi. Lucius Fox Would Resign Again
════════════════════════
𐀪 Author: Sage Khan
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:28:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #ruview #batman #hacking #wifi
Medium
RuView: The Open-Source System That Sees Through Walls With WiFi. Lucius Fox Would Resign Again
Prologue: “Beautiful. Unethical. Dangerous.”
13 views
Daily Writeups
⤷ Title: The Guide to Penetration Testing: Methodologies, Reconnaissance, and Tools
════════════════════════
𐀪 Author: Gauravdahala
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:54:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
Medium
The Guide to Penetration Testing: Methodologies, Reconnaissance, and Tools
Cyberattacks are increasing every year, targeting companies, governments, and individuals. Organizations need a way to identify weaknesses…
8 views
Daily Writeups
⤷ Title: Web Security Series #4 — Discovering Unauthorized Resources via IDOR (Burp Suite & ffuf)
════════════════════════
𐀪 Author: Laibakashif
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:45:35 GMT
════════════════════════
⌗ Tags: #web_application_security #penetration_testing #bug_bounty_hunting #ethical_hacking #cybersecurity
Medium
Web Security Series #4 — Discovering Unauthorized Resources via IDOR (Burp Suite & ffuf)
Access control mechanisms are a fundamental component of web application security. When implemented incorrectly, they can allow attackers…
23 views
Daily Writeups
⤷ Title: Before You Hack Anything, You Have to Know Everything: A Beginner’s Guide to Information Gathering…
════════════════════════
𐀪 Author: AashishChaudhari
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:03:01 GMT
════════════════════════
⌗ Tags: #penetration_testing #kali_linux #osint #beginners_guide #cybersecurity
Medium
Before You Hack Anything, You Have to Know Everything: A Beginner’s Guide to Information Gathering in Penetration Testing
The phase that separates professionals from amateurs, and why every great hack starts with listening, not attacking.
13 views
Daily Writeups
⤷ Title: Active Directory Attack: Kerberoasting by Mert Baykal
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 15:47:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #windows_security #active_directory #penetration_testing
Medium
Active Directory Attack: Kerberoasting by Mert Baykal
In Active Directory environments, Kerberos is the default authentication protocol used for secure communication between users and services.
19 views
Daily Writeups
⤷ Title: Nmap Reconnaissance on Vulnversity — A Beginner Friendly Walkthrough
════════════════════════
𐀪 Author: Zahid (Cybersecurity Student)
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:29:49 GMT
════════════════════════
⌗ Tags: #vulnversity_tryhackme #nmap_reconnaissance #cybersecurity_lab #network_scanning #ethical_hacking
Medium
Nmap Reconnaissance on Vulnversity — A Beginner Friendly Walkthrough
Cybersecurity often begins with one very important phase: reconnaissance. Before testing or attacking a system, security professionals need…
33 views
Daily Writeups
⤷ Title: Beyond Firewalls: Why Identity-First Security Is the New Standard for API Development
════════════════════════
𐀪 Author: Arnav Pyrell
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:38:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #technology #api_security #identity_security
Medium
Beyond Firewalls: Why Identity-First Security Is the New Standard for API Development
For a long time, application security followed a simple philosophy.
36 views
Daily Writeups
⤷ Title: How I Found Dependency Confusion Vulnerabilities in Public GitHub Repositories
════════════════════════
𐀪 Author: Sidhanta Palei
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 17:41:00 GMT
════════════════════════
⌗ Tags: #open_source #bug_bounty #supply_chain_security #security #cybersecurity
Medium
How I Found Dependency Confusion Vulnerabilities in Public GitHub Repositories
Building PACO — a browser extension for detecting supply chain security risks in NPM, PyPI, and Ruby dependencies
26 views
Daily Writeups
⤷ Title: When a Composite Checkout Keeps Pricing From a State That No Longer Exists
════════════════════════
𐀪 Author: sin99xx
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 17:21:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #security #cybersecurity #bugbounty_tips #bug_bounty
Medium
When a Composite Checkout Keeps Pricing From a State That No Longer Exists
Most payment bugs people look for are obvious: changing a price, reusing a discount, forcing a negative total, or finding a race condition.
22 views
Daily Writeups
⤷ Title: The Deployment Door Nobody Checked: How a Logic Flaw Bypassed Cloud Authentication Entirely
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 17:10:59 GMT
════════════════════════
⌗ Tags: #earn_money_online #business #bug_bounty_writeup #bug_bounty #bug_bounty_tips
Medium
The Deployment Door Nobody Checked: How a Logic Flaw Bypassed Cloud Authentication Entirely
A cloud security case study in unauthenticated deployment, auth bypass logic bugs, and what it teaches every bug bounty hunter about where…
21 views
Daily Writeups
⤷ Title: The Beginner’s Bug Bounty Trap: Why Learning More Is Making You Earn Less
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 17:10:35 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #business #earn_money_online #bug_bounty #bug_bounty_writeup
Medium
The Beginner’s Bug Bounty Trap: Why Learning More Is Making You Earn Less
The counter-intuitive truth about Bug Bounty 2026 that most beginners discover too late — and how to find your first valid bug without…
27 views
Daily Writeups
⤷ Title: Multi-Factor Authentication Gaps - Why MFA Is Not a Silver Bullet When It Is Built Wrong
════════════════════════
𐀪 Author: Rufus Kehinde
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 18:51:01 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #multifactorauthentication #authentication #software_development
Medium
Multi-Factor Authentication Gaps - Why MFA Is Not a Silver Bullet When It Is Built Wrong
Turning on MFA and assuming your platform is now secure is a bit like installing a second lock on your front door, but leaving the back…
20 views