Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The “Hot Dog” Hack: How a BBC Reporter Fooled Google and ChatGPT with a Single Blog Post
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:15:00 +0000
════════════════════════
⌗ Tags: #Technology #AI Search #ChatGPT #Content Marketing #Digital Literacy #Disinformation #Gemini #Google AI Overviews #SEO #Tech News 2026 #Thomas Germain
Penetration Testing Tools
The "Hot Dog" Hack: How a BBC Reporter Fooled Google and ChatGPT with a Single Blog Post
BBC technology reporter Thomas Germain recounted in an interview how he personally tested the ease with which ubiquitous
14 views
Daily Writeups
⤷ Title: Understanding Content Security Policy (CSP) and Per-Endpoint Policies
════════════════════════
𐀪 Author: Ronny
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 18:02:39 GMT
════════════════════════
⌗ Tags: #content_security_policy #django #application_security #web_security #cybersecurity
Medium
Understanding Content Security Policy (CSP) and Per-Endpoint Policies
Content Security Policy (CSP) is a powerful web security standard designed to prevent cross-site scripting (XSS), clickjacking, and other…
22 views
Daily Writeups
⤷ Title: Master Directory Brute-Forcing: A Guide to Using ffuf
════════════════════════
𐀪 Author: Aditya InfosecTrain
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 06:04:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #content_discovery #ffuf #web_vulnerabilities
Medium
Master Directory Brute-Forcing: A Guide to Using ffuf
Finding hidden directories and files is a fundamental step in any security assessment, and ffuf (Fuzz Faster U Fool) has quickly become the…
30 views
Daily Writeups
⤷ Title: Critical Craft CMS Flaw Grants Instant Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 08:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anthropic #Content Management System #Craft CMS #CVE_2026_32267 #cybersecurity #infosec #Patch Alert #privilege escalation #Web Security
Daily CyberSecurity
Critical Craft CMS Flaw Grants Instant Admin Access
In the world of web development, the “Live Preview” button is a staple for content editors—a harmless way to see how an article looks before it goes live. However, a newly discovered v…
19 views
Daily Writeups
⤷ Title: An Open Door for Attackers. Lock It with CSP.
════════════════════════
𐀪 Author: Asrarul Hoque Eusha
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:09:06 GMT
════════════════════════
⌗ Tags: #content_security_policy #xss_vulnerability #web_security #clickjacking
Medium
An Open Door for Attackers. Lock It with CSP.
A complete guide to Content Security Policy — from your first header to a production-hardened, violation-reporting policy.
4 views
Daily Writeups
⤷ Title: Junior Pentester labs of try hack me; main content
════════════════════════
𐀪 Author: Abdulnafayk
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 12:49:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #content_discovery #tryhackme #reconnaissance
Medium
Junior Pentester labs of try hack me; main content
What is sitemap.xml?
14 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:56:25 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
15 views
Daily Writeups
⤷ Title: CSP bypass and Dangling Markup Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:58:15 GMT
════════════════════════
⌗ Tags: #xss_attack #css #xs #content_security_policy #cross_site_scripting
Medium
CSP bypass and Dangling Markup Xss
🧠 What is CSP?
20 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 06:02:19 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
18 views
Daily Writeups
⤷ Title: Content Security Policy | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Wed, 06 May 2026 09:46:57 GMT
════════════════════════
⌗ Tags: #content_security_policy #tryhackme #xs #cybersecurity #vulnerability
Medium
Content Security Policy | TryHackMe
In this room you’ll learn what CSP is, what it’s used for and how to recognize vulnerabilities in a CSP header.
17 views
Daily Writeups
⤷ Title: Reddit in the Spotlight: Google’s Search Pivot Puts “First-Hand Accounts” at the Core of AI Overviews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:04:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews #content licensing #Digital Marketing 2026 #Expert Advice #First_Hand Accounts #Google AI Mode #google search #Reddit #Search Engine Updates #SEO Strategy #Zero_Click Search
Daily CyberSecurity
Reddit in the Spotlight: Google’s Search Pivot Puts "First-Hand Accounts" at the Core of AI Overviews
Google’s AI Overviews shift focus to first-hand accounts from Reddit and social media. Discover how "Expert Advice" and inline linking aim to reclaim user trust.
16 views
Daily Writeups
⤷ Title: The Slop Line
════════════════════════
𐀪 Author: Suman Reddy
════════════════════════
ⴵ Time: Wed, 13 May 2026 17:46:15 GMT
════════════════════════
⌗ Tags: #gpt #content #ai_slop #xs
Medium
The Slop Line
What a viral Gen Z GPT taught me about AI content, emotional resonance, and the difference between sounding right and actually landing.
26 views
Daily Writeups
⤷ Title: The New Rule For X Creators: Stop Chasing Likes, Start Creating Better Reader Signals
════════════════════════
𐀪 Author: John Galt
════════════════════════
ⴵ Time: Mon, 18 May 2026 05:48:23 GMT
════════════════════════
⌗ Tags: #content_creation #xs #social_media #content_creators #twitter
Medium
The New Rule For X Creators: Stop Chasing Likes, Start Creating Better Reader Signals
The New Rule For X Creators: Stop Chasing Likes, Start Creating Better Reader Signals Most creators are still trying to win the old game. They ask: “How do I get more likes?” Wrong …
37 views
Daily Writeups
⤷ Title: Phoenix Invicta Extension Malware Strips CSP Headers to Bypass Manifest V3
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 08:08:50 +0000
════════════════════════
⌗ Tags: #Malware #7AI Threat Intelligence #browser extension malware #Content Security Policy Stripping #JavaScript Backdoor #lottingem.com #Manifest V3 Bypass #MyColorPick #Phoenix Invicta #Search Engine Ad Fraud #statsdata.online
Penetration Testing Tools
Phoenix Invicta Extension Malware Strips CSP Headers to Bypass Manifest V3
Popular browser extensions have historically been perceived as benign, utilitarian artifacts—innocuous implements such as color droppers, ad-blockers, or
21 views