Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The “Free” Professional: How I Broke the Payment Logic of a Global Research Platform (IFERP)
════════════════════════
𐀪 Author: Abdelkafi Habbeddine
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 10:09:14 GMT
════════════════════════
⌗ Tags: #price_manipulation #bug_bounty #attack #cybersecurity #servers
Medium
The “Free” Professional: How I Broke the Payment Logic of a Global Research Platform (IFERP)
The Discovery
48 views
Daily Writeups
⤷ Title: What Is A Subdomain And How To Perform Subdomain Enumaration?
════════════════════════
𐀪 Author: Kutay Söker
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 20:22:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #attack_surface_management #subdomains_enumeration #penetration_testing
Medium
What Is A Subdomain And How To Perform Subdomain Enumaration?
Hi! Today we will talk about domains, subdomains and subdomain enumaration. If want to understand what the subdmains are we have to get to…
26 views
Daily Writeups
⤷ Title: Massive SonicWall Reconnaissance Campaign Signals Imminent Ransomware Strikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 01:23:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Akira ransomware #Attack surface mapping #CVE_2024_53704 #Fog Ransomware #GreyNoise #infosec #reconnaissance #SonicOS #SonicWall #SSL VPN #threat intelligence
Daily CyberSecurity
Massive SonicWall Reconnaissance Campaign Signals Imminent Ransomware Strikes
GreyNoise detects a coordinated surge in SonicWall reconnaissance. With over 84,000 scans, attackers are mapping VPNs for Akira and Fog ransomware strikes.
31 views
Daily Writeups
⤷ Title: Connecting the Dots: PrivHound Transforms Windows Local Privilege Escalation into an Explorable Graph
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 02:32:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Attack Paths #BloodHound #cybersecurity #local privilege escalation #LPE #OpenGraph #Penetration Testing #PrivHound #Windows Security
Penetration Testing Tools
Connecting the Dots: PrivHound Transforms Windows Local Privilege Escalation into an Explorable Graph
Discover PrivHound, a BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths instead of static text.
32 views
Daily Writeups
⤷ Title: 9 Powerful Attack Surface Management Checks Before a Pentest
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 10:18:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #cloud_security #attack_surface_management #cybersecurity
Medium
9 Powerful Attack Surface Management Checks Before a Pentest
Modern attackers don’t “start hacking” when they find a vulnerability. They start earlier — by building a map of everything you expose to…
42 views
Daily Writeups
⤷ Title: CVSS Scores Demystified: How Ethical Hackers Earn Big in Bug Bounty Programs
════════════════════════
𐀪 Author: Bugitrix
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:14:09 GMT
════════════════════════
⌗ Tags: #vulnerability #attack #bug_bounty_tips #bug_bounty #cybersecurity
Medium
🚀 CVSS Scores Demystified: How Ethical Hackers Earn Big in Bug Bounty Programs
Bug bounty hunting is one of the hottest fields in ethical hacking, and payouts often depend on one thing: the CVSS score. If you’ve ever…
25 views
Daily Writeups
⤷ Title: Microsoft Paid $1.6 Million to Hackers in a Single Event — Here’s How You Can Get Invited
════════════════════════
𐀪 Author: Bugitrix
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 13:41:11 GMT
════════════════════════
⌗ Tags: #vulnerability #attack #cybersecurity #bug_bounty #bug_bounty_tips
Medium
Microsoft Paid $1.6 Million to Hackers in a Single Event — Here’s How You Can Get Invited
What if I told you that breaking into Microsoft’s systems — legally — could earn you thousands of dollars?
40 views
Daily Writeups
⤷ Title: Attack Surface Drift Between Pentests
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:10:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cloud_security #attack_surface_management #cybersecurity #api_security
Medium
Attack Surface Drift Between Pentests
Attack Surface Drift: Why Your Security Posture Changes Faster Than Your Last Pentest
11 views
Daily Writeups
⤷ Title: Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
════════════════════════
𐀪 Author: Fatih UYSAL
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:12:11 GMT
════════════════════════
⌗ Tags: #web_app_security #pentesting #bug_bounty #cybersecurity #attack_surface_management
Medium
Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
Gölge BT’den Subdomain Takeover’a: Görünmeyeni Yönetmek ve Korumak
17 views
Daily Writeups
⤷ Title: DoS Attack Lab Setup — Educational Practical Ethical Hacking Lab
════════════════════════
𐀪 Author: MainEkHacker
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 11:46:01 GMT
════════════════════════
⌗ Tags: #dos_attack #ethical_hacking #cyberattack #attack #cybersecurity
Medium
DoS Attack Lab Setup — Educational Practical Ethical Hacking Lab
Every hackers should about this..
17 views
Daily Writeups
⤷ Title: Stop SQL Injection Attacks Before They Start (A Practical Guide for Developers)
════════════════════════
𐀪 Author: PAPPURAJ BHOTTACHARJEE
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:12:34 GMT
════════════════════════
⌗ Tags: #security #web_security #attack #vulnerability #sql_injection
Medium
Stop SQL Injection Attacks Before They Start (A Practical Guide for Developers)
A junior engineer once deployed a simple login feature.
36 views
Daily Writeups
⤷ Title: How to Find Real Vulnerabilities Using Source -> Flow -> Sink
════════════════════════
𐀪 Author: Suraj Vishwakarma
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 10:10:51 GMT
════════════════════════
⌗ Tags: #application_security #attack_chain #red_team #secure_code_review #sast
Medium
How to Find Real Vulnerabilities Using Source -> Flow -> Sink
There are several mental models worth building as a security engineer. This is one of the more practical ones — and one that’s often…
23 views
Daily Writeups
⤷ Title: Relevant Room Full walkthrough Tryhackme :- Step by Step
════════════════════════
𐀪 Author: Chandan
════════════════════════
ⴵ Time: Sun, 26 Apr 2026 11:37:12 GMT
════════════════════════
⌗ Tags: #attack #penetration_testing #tryhackme_walkthrough #hacking #ai
Medium
Relevant Room Full walkthrough Tryhackme :- Step by Step
The Relevant room on TryHackMe is a medium-difficulty CTF-style penetration testing challenge that simulates a real-world client…
31 views
Daily Writeups
⤷ Title: Cybersecurity is not just about prevention, it’s about testing your defenses before attackers do.
════════════════════════
𐀪 Author: HackersPrey
════════════════════════
ⴵ Time: Mon, 18 May 2026 09:37:03 GMT
════════════════════════
⌗ Tags: #attack_simulation #red_teaming #threat_simulation #cybersecurity #penetration_testing
Medium
Cybersecurity is not just about prevention, it’s about testing your defenses before attackers do.
Real-world attack simulations help identify weaknesses in people, processes, and technology before they become real incidents.
11 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
15 views