Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Cross-Site Scripting (XSS) Explained: How a “Low Severity” Vulnerability Leads to Enterprise…
════════════════════════
𐀪 Author: Err0rr0rre
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 17:04:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #xs #infosec
Medium
Cross-Site Scripting (XSS) Explained: How a “Low Severity” Vulnerability Leads to Enterprise Breaches
Most organizations don’t worry about XSS.
3 views
Daily Writeups
⤷ Title: Red Team: SQL Injection on DVWA
════════════════════════
𐀪 Author: Haritsar
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 06:11:00 GMT
════════════════════════
⌗ Tags: #sqli #dvwa #sql_injection #dvwa_sql_injection
Medium
SQL Injection on DVWA
Introduction SQL Injection
SQL Injection adalah web vulnerability di mana penyerang menyisipkan perintah SQL berbahaya ke dalam input…
6 views
Daily Writeups
⤷ Title: Portal | CyCTF Luxor Finals 2026
════════════════════════
𐀪 Author: 0xAmIn
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 12:35:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #lfi_to_rce #ssrf #ctf_writeup
Medium
Portal | CyCTF Luxor Finals 2026
Hello everyone! This is my very first write-up, but not the last. I’m excited to share my solution for a challenge from a recent CTF where…
5 views
Daily Writeups
⤷ Title: TryHackMe — Intro to SSRF (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:11:54 GMT
════════════════════════
⌗ Tags: #ssrf #tryhackme #ssrf_attack #tryhackme_walkthrough #tryhackme_writeup
Medium
TryHackMe — Intro to SSRF (Walkthrough)
In this room, we will learn about the definition, the various types, and impacts of the SSRF.
5 views
Daily Writeups
⤷ Title: Understanding API Security by Building, Exploiting, and Hardening a Vulnerable API
════════════════════════
𐀪 Author: Ashutosh Hacks
════════════════════════
ⴵ Time: Mon, 30 Mar 2026 03:28:04 GMT
════════════════════════
⌗ Tags: #appsec #ssrf #owasp #cybersecurity #api_security
Medium
Understanding API Security by Building, Exploiting, and Hardening a Vulnerable API
Modern applications are driven by APIs. Whether it’s mobile apps, web apps, or microservices — APIs sit at the center of everything.
6 views
Daily Writeups
⤷ Title: TryHackMe | Plant Photographer Walkthrough
════════════════════════
𐀪 Author: Hada Manash
════════════════════════
ⴵ Time: Sun, 29 Mar 2026 19:09:33 GMT
════════════════════════
⌗ Tags: #web_security #ssrf #werkzeug #ctf #tryhackme_walkthrough
Medium
TryHackMe | Plant Photographer Walkthrough
Dig deeper and try to uncover the flag hidden behind the scenes.
6 views
Daily Writeups
⤷ Title: Plant Photographer TryHackMe Writeup
════════════════════════
𐀪 Author: Amimerayoub
════════════════════════
ⴵ Time: Sun, 29 Mar 2026 15:21:24 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #ssrf #tryhackme
Medium
Plant Photographer TryHackMe Writeup
Chaining SSRF, File Read & Werkzeug RCE
6 views
Daily Writeups
⤷ Title: WIZ Bug Bounty Master Class: SSRF Vulnerability on Major Gaming Company
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 14:27:07 GMT
════════════════════════
⌗ Tags: #hackerone #web_app_security #ssrf #bug_bounty
Medium
WIZ Bug Bounty Master Class: SSRF Vulnerability on Major Gaming Company
URL: https://content-service.bugbountymasterclass.com
11 views
Daily Writeups
⤷ Title: CVE-2025–4123 Grafana Open Redirect & SSRF — Full PoC — CVSS 7.6 HIGH
════════════════════════
𐀪 Author: Dharanis
════════════════════════
ⴵ Time: Thu, 26 Mar 2026 18:22:21 GMT
════════════════════════
⌗ Tags: #ssrf #bug_bounty #cybersecurity #grafana #vapt
Medium
CVE-2025–4123 Grafana Open Redirect & SSRF — Full PoC — CVSS 7.6 HIGH
Client-Side Path Traversal in /public/ · No Auth Required · Grafana < 12.0.0
11 views
Daily Writeups
⤷ Title: Modern SSRF — Part 4 (Expert Edition): How to Write High-Impact SSRF Reports ThWWW at Earn 5×…
════════════════════════
𐀪 Author: ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦
════════════════════════
ⴵ Time: Thu, 26 Mar 2026 09:09:22 GMT
════════════════════════
⌗ Tags: #bug_bounty #ssrf #cyber_security_awareness #cybersecurity #bug_bounty_tips
Medium
🚀 Modern SSRF — Part 4 (Expert Edition): How to Write High-Impact SSRF Reports ThWWW at Earn 5× Bigger Bounties
जय श्री राम 🚩🕉️ , Readers
5 views
Daily Writeups
⤷ Title: Server-Side Request Forgery (SSRF) - When Attackers Use Your Own Server as Their Personal Messenger
════════════════════════
𐀪 Author: Rufus Kehinde
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 18:17:58 GMT
════════════════════════
⌗ Tags: #ai #information_security #cybersecurity #ssrf #serverless
Medium
Server-Side Request Forgery (SSRF) - When Attackers Use Your Own Server as Their Personal Messenger
The most dangerous position an attacker can reach is not outside your system throwing attacks at it. It is inside your network, making…
3 views
Daily Writeups
⤷ Title: From Exposure to RCE: Inside the Wing FTP Server Attack Chain
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 08:44:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #server_attack_chain #it_security #wing_ftp #rce
Medium
From Exposure to RCE: Inside the Wing FTP Server Attack Chain
A recently discovered information disclosure vulnerability in Wing FTP Server (CVE-2025–47813) has been confirmed to be actively exploited…
3 views
Daily Writeups
⤷ Title: F5 BIG‑IP RCE Exploited: Why You Must Patch Now — Actionable Security
════════════════════════
𐀪 Author: Frank Marano
════════════════════════
ⴵ Time: Mon, 30 Mar 2026 00:00:20 GMT
════════════════════════
⌗ Tags: #cyberattack #rce #f5_big_ip #cybersecurity #f5
Medium
F5 BIG‑IP RCE Exploited: Why You Must Patch Now — Actionable Security
Every few months, the cybersecurity world gifts us a new reminder that the internet is basically a haunted house full of unpatched…
3 views
Daily Writeups
⤷ Title: CVE-2026–24061 GNU InetUtils Telnetd Authentication Bypass Vulnerability — RCE as Root
════════════════════════
𐀪 Author: Eternal Edge
════════════════════════
ⴵ Time: Sat, 28 Mar 2026 12:23:40 GMT
════════════════════════
⌗ Tags: #linux #rce #cve #telnet #vulnerability_research
Medium
CVE-2026–24061 GNU InetUtils Telnetd Authentication Bypass Vulnerability — RCE as Root
11 yıl boyunca keşfedilmeyen bu açık, tek bir ortam değişkeni manipülasyonu ile root shell elde etmenizi sağlıyor.
6 views
Daily Writeups
⤷ Title: I Thought It Was a Container… It Was a Whole Azure VM (RCE Story)
════════════════════════
𐀪 Author: Utkarsh Srivastava
════════════════════════
ⴵ Time: Mon, 23 Mar 2026 19:43:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #rce_vulnerability #rce
Medium
I Thought It Was a Container… It Was a Whole Azure VM (RCE Story)
Escaping the IDE: From Code Execution to Root on Azure VM
8 views
Daily Writeups
⤷ Title: File Upload by RCE: Apache Tomcat Manager Exploit
════════════════════════
𐀪 Author: Digvijaysingh
════════════════════════
ⴵ Time: Mon, 23 Mar 2026 11:04:28 GMT
════════════════════════
⌗ Tags: #shell #reverse_shell #rce_vulnerability #rce #remote_code_execution
Medium
🧠 File Upload by RCE: Apache Tomcat Manager Exploit
🔎 1. Recon
8 views
Daily Writeups
⤷ Title: CVE-2026–22812: How I Got RCE on a 71k-Star AI Coding Tool With Zero Authentication
════════════════════════
𐀪 Author: Dharanis
════════════════════════
ⴵ Time: Sat, 21 Mar 2026 17:10:46 GMT
════════════════════════
⌗ Tags: #open_code #bug_bounty #cybersecurity #rce #vulnerability
Medium
CVE-2026–22812: How I Got RCE on a 71k-Star AI Coding Tool With Zero Authentication
Unauthenticated Remote Code Execution in OpenCode — CVSS 8.8 (High)
8 views
Daily Writeups
⤷ Title: Cross Site Scripting (XSS):
════════════════════════
𐀪 Author: Sandeeppavan
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:24:26 GMT
════════════════════════
⌗ Tags: #dom_xss #xss_attack #stored_xss #xss_vulnerability #reflected_xss
Medium
Cross Site Scripting (XSS):
Introduction:
5 views
Daily Writeups
⤷ Title: An Open Door for Attackers. Lock It with CSP.
════════════════════════
𐀪 Author: Asrarul Hoque Eusha
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:09:06 GMT
════════════════════════
⌗ Tags: #content_security_policy #xss_vulnerability #web_security #clickjacking
Medium
An Open Door for Attackers. Lock It with CSP.
A complete guide to Content Security Policy — from your first header to a production-hardened, violation-reporting policy.
4 views
Daily Writeups
⤷ Title: Robots CTF | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:05:08 GMT
════════════════════════
⌗ Tags: #web_exploitation #xss_vulnerability #tryhackme_walkthrough #ssrf_attack #rce_vulnerability
Medium
Robots CTF | TryHackMe Walkthrough
A (small) tribute to I. Asimov.
4 views
Daily Writeups
⤷ Title: Securing the Edges: A Practical Way to Handle XSS in Modern Apps
════════════════════════
𐀪 Author: Dogukan Batal
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 09:02:27 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #javascript #xss_attack #cross_site_scripting #web_security
Medium
Securing the Edges: A Practical Way to Handle XSS in Modern Apps
Modern frameworks like React or Vue protect us from many XSS attacks by default. They escape values automatically and make common mistakes…
3 views