Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: File Upload by RCE: Apache Tomcat Manager Exploit
════════════════════════
𐀪 Author: Digvijaysingh
════════════════════════
ⴵ Time: Mon, 23 Mar 2026 11:04:28 GMT
════════════════════════
⌗ Tags: #shell #reverse_shell #rce_vulnerability #rce #remote_code_execution
Medium
🧠 File Upload by RCE: Apache Tomcat Manager Exploit
🔎 1. Recon
8 views
Daily Writeups
⤷ Title: CVE-2026–22812: How I Got RCE on a 71k-Star AI Coding Tool With Zero Authentication
════════════════════════
𐀪 Author: Dharanis
════════════════════════
ⴵ Time: Sat, 21 Mar 2026 17:10:46 GMT
════════════════════════
⌗ Tags: #open_code #bug_bounty #cybersecurity #rce #vulnerability
Medium
CVE-2026–22812: How I Got RCE on a 71k-Star AI Coding Tool With Zero Authentication
Unauthenticated Remote Code Execution in OpenCode — CVSS 8.8 (High)
8 views
Daily Writeups
⤷ Title: Cross Site Scripting (XSS):
════════════════════════
𐀪 Author: Sandeeppavan
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:24:26 GMT
════════════════════════
⌗ Tags: #dom_xss #xss_attack #stored_xss #xss_vulnerability #reflected_xss
Medium
Cross Site Scripting (XSS):
Introduction:
5 views
Daily Writeups
⤷ Title: An Open Door for Attackers. Lock It with CSP.
════════════════════════
𐀪 Author: Asrarul Hoque Eusha
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:09:06 GMT
════════════════════════
⌗ Tags: #content_security_policy #xss_vulnerability #web_security #clickjacking
Medium
An Open Door for Attackers. Lock It with CSP.
A complete guide to Content Security Policy — from your first header to a production-hardened, violation-reporting policy.
4 views
Daily Writeups
⤷ Title: Robots CTF | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:05:08 GMT
════════════════════════
⌗ Tags: #web_exploitation #xss_vulnerability #tryhackme_walkthrough #ssrf_attack #rce_vulnerability
Medium
Robots CTF | TryHackMe Walkthrough
A (small) tribute to I. Asimov.
4 views
Daily Writeups
⤷ Title: Securing the Edges: A Practical Way to Handle XSS in Modern Apps
════════════════════════
𐀪 Author: Dogukan Batal
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 09:02:27 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #javascript #xss_attack #cross_site_scripting #web_security
Medium
Securing the Edges: A Practical Way to Handle XSS in Modern Apps
Modern frameworks like React or Vue protect us from many XSS attacks by default. They escape values automatically and make common mistakes…
3 views
Daily Writeups
⤷ Title: XSS (Cross site scripting)
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 26 Mar 2026 05:34:51 GMT
════════════════════════
⌗ Tags: #xss_vulnerability
Medium
XSS (Cross site scripting)
Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users…
3 views
Daily Writeups
⤷ Title: Why location.href Isn’t Just a Redirect:
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Tue, 24 Mar 2026 17:38:54 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_vulnerability #web_security #information_security #cybersecurity
Medium
Why location.href Isn’t Just a Redirect:
Understanding Navigation-Based XSS
3 views
Daily Writeups
⤷ Title: From iframe Injection to Account Takeover (Full Exploit Chain)
════════════════════════
𐀪 Author: 0xRedFox29
════════════════════════
ⴵ Time: Mon, 23 Mar 2026 06:24:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #xss_vulnerability #bug_bounty_writeup #bug_bounty #account_takeover_attacks
Medium
From iframe Injection to Account Takeover (Full Exploit Chain)🔥
How can I escalate the impact of an iframe injection vulnerability to account takeover via XSS?
4 views
Daily Writeups
⤷ Title: Stored DOM XSS to Account Takeover
════════════════════════
𐀪 Author: 0xRedFox29
════════════════════════
ⴵ Time: Sat, 21 Mar 2026 13:15:25 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #account_takeover #bug_bounty_writeup #xss_attack #bug_bounty_tips
Medium
Stored DOM XSS to Account Takeover
bagaimana teknik melewati XSS filter dengan payload yang whitelist untuk memaksimalkan fitur dan menaikan dampaknya ke account takeover
4 views
Daily Writeups
⤷ Title: How Do Concrete Vaults Actually Work?
════════════════════════
𐀪 Author: Hirabauldas
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 03:49:06 GMT
════════════════════════
⌗ Tags: #zcf #rce_vulnerability #werewolves #book_recommendations #c
Medium
How Do Concrete Vaults Actually Work?
You open a DeFi app, deposit your funds into a vault, and suddenly you see new terms appear — vault shares, eRate, and NAV. Your balance…
5 views
Daily Writeups
⤷ Title: CVE-2026–33139 How I Found My First CVE: Bypassing PySpector’s Plugin Security Sandbox
════════════════════════
𐀪 Author: Shinigami81
════════════════════════
ⴵ Time: Wed, 25 Mar 2026 17:00:00 GMT
════════════════════════
⌗ Tags: #python #cybersecurity #security_research #pyspector #rce_vulnerability
Medium
CVE-2026–33139 How I Found My First CVE: Bypassing PySpector’s Plugin Security Sandbox
Where it started
4 views
Daily Writeups
⤷ Title: SQL Injection UNION Attack: Retrieving Multiple Values in a Single Column
════════════════════════
𐀪 Author: Mohamed Ahmed
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 00:20:31 GMT
════════════════════════
⌗ Tags: #websecurity_testing #penetration_testing #cybersecurity #sql_injection #bug_bounty
Medium
SQL injection UNION attack, retrieving multiple values in a single column
A practical PortSwigger lab walkthrough for UNION-based SQL injection
3 views
Daily Writeups
⤷ Title: SQL Injection: How a Single Line of Code Can Make Your Website Vulnerable
════════════════════════
𐀪 Author: Dalila Zitouni
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 02:26:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #data_protection #sql_injection #cybersecurity #web_security
Medium
SQL Injection: How a Single Line of Code Can Make Your Website Vulnerable
This article was written to share my knowledge about web security and demonstrate my technical skills in cybersecurity.
7 views
Daily Writeups
⤷ Title: Juice Shop Write-up: Login Admin Challenge
════════════════════════
𐀪 Author: ~ Jeff ~
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 01:50:44 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #owasp_juice_shop #ethical_hacking #web_penetration_testing
Medium
Juice Shop Write-up: Login Admin Challenge
The goal of this challenge is to exploit an SQL Injection vulnerability in the login functionality to gain unauthorized access to the…
5 views
Daily Writeups
⤷ Title: Cybersecurity 101 for Backend Devs: Preventing Injection Beyond SQL
════════════════════════
𐀪 Author: Rahul Kaklotar
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 00:16:01 GMT
════════════════════════
⌗ Tags: #sql #data_science #sql_injection #cybersecurity #database
Medium
Cybersecurity 101 for Backend Devs: Preventing Injection Beyond SQL
Most Devs Miss This Security Gap!
6 views
Daily Writeups
⤷ Title: SQL Injection Attack
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 22:34:14 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #hacking #ctf_writeup
Medium
SQL Injection Attack
Hack the Logic: How ' OR 1=1 -- Breaks the Internet
6 views
Daily Writeups
⤷ Title: Lab: SQL injection attack, listing the database contents on Oracle
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 18:43:56 GMT
════════════════════════
⌗ Tags: #sql_injection #pentesting #hacking #ctf #pentest_web
Medium
Lab: SQL injection attack, listing the database contents on Oracle
Bu lab’de, product category filter üzerinden oluşan bir SQL Injection zafiyetini kullanarak veritabanı üzerinde ilerliyorum. Uygulama…
9 views
Daily Writeups
⤷ Title: Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection (Part 2).
════════════════════════
𐀪 Author: ALESSANDRO FARREL GERRARD WIJAYA
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:43:58 GMT
════════════════════════
⌗ Tags: #sql_injection #portswigger_academy_labs
Medium
Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection (Part 2).
Focuses on performing step by step tutorials on solving all practitioner levels SQL Injection.
15 views
Daily Writeups
⤷ Title: Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection.
════════════════════════
𐀪 Author: ALESSANDRO FARREL GERRARD WIJAYA
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:31:28 GMT
════════════════════════
⌗ Tags: #portswigger_academy_labs #sql_injection
Medium
Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection.
Focuses on performing step by step tutorials on solving all practitioner levels SQL Injection.
4 views
Daily Writeups
⤷ Title: Exposed .env File Leads To API Key Leak & Financial Impact
════════════════════════
𐀪 Author: 1sherlok
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 15:11:10 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity
Medium
Exposed .env File Leads To API Key Leak & Financial Impact
Hello everyone, I’m Sherlok, and today I’d like to share how I discovered an exposed .env file that led to leaked API credentials and real…
4 views