Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Cybersecurity 101 for Backend Devs: Preventing Injection Beyond SQL
════════════════════════
𐀪 Author: Rahul Kaklotar
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 00:16:01 GMT
════════════════════════
⌗ Tags: #sql #data_science #sql_injection #cybersecurity #database
Medium
Cybersecurity 101 for Backend Devs: Preventing Injection Beyond SQL
Most Devs Miss This Security Gap!
6 views
Daily Writeups
⤷ Title: SQL Injection Attack
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 22:34:14 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #hacking #ctf_writeup
Medium
SQL Injection Attack
Hack the Logic: How ' OR 1=1 -- Breaks the Internet
6 views
Daily Writeups
⤷ Title: Lab: SQL injection attack, listing the database contents on Oracle
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 18:43:56 GMT
════════════════════════
⌗ Tags: #sql_injection #pentesting #hacking #ctf #pentest_web
Medium
Lab: SQL injection attack, listing the database contents on Oracle
Bu lab’de, product category filter üzerinden oluşan bir SQL Injection zafiyetini kullanarak veritabanı üzerinde ilerliyorum. Uygulama…
9 views
Daily Writeups
⤷ Title: Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection (Part 2).
════════════════════════
𐀪 Author: ALESSANDRO FARREL GERRARD WIJAYA
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:43:58 GMT
════════════════════════
⌗ Tags: #sql_injection #portswigger_academy_labs
Medium
Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection (Part 2).
Focuses on performing step by step tutorials on solving all practitioner levels SQL Injection.
15 views
Daily Writeups
⤷ Title: Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection.
════════════════════════
𐀪 Author: ALESSANDRO FARREL GERRARD WIJAYA
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:31:28 GMT
════════════════════════
⌗ Tags: #portswigger_academy_labs #sql_injection
Medium
Day 16–17 of PortSwigger Academy Lab Practitioner Walkthrough: SQL injection.
Focuses on performing step by step tutorials on solving all practitioner levels SQL Injection.
4 views
Daily Writeups
⤷ Title: Exposed .env File Leads To API Key Leak & Financial Impact
════════════════════════
𐀪 Author: 1sherlok
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 15:11:10 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity
Medium
Exposed .env File Leads To API Key Leak & Financial Impact
Hello everyone, I’m Sherlok, and today I’d like to share how I discovered an exposed .env file that led to leaked API credentials and real…
4 views
Daily Writeups
⤷ Title: How I Found a Critical SAML Authentication Bypasson a Major Automotive Company's Dealer Portal
════════════════════════
𐀪 Author: Ousski
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 19:03:43 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity #bug_hunting
Medium
How I Found a Critical SAML Authentication Bypasson a Major Automotive Company's Dealer Portal
INTRODUCTION:
5 views
Daily Writeups
⤷ Title: How to Hunt IDORs When IDs Are UUIDs (Not Integers) Lab: User ID controlled by request parameter…
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 23:00:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #ethical_hacking #owasp #cyber_security_solutions
Medium
How to Hunt IDORs When IDs Are UUIDs (Not Integers) Lab: User ID controlled by request parameter, with unpredictable user IDs
Most guides teach you to change /user/1 to /user/2. Real apps use UUIDs. Here is how to find them.
7 views
Daily Writeups
⤷ Title: Breaking It During a Hackathon
════════════════════════
𐀪 Author: debang5hu
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 20:08:39 GMT
════════════════════════
⌗ Tags: #api #bug_bounty_writeup #cybersecurity #bug_bounty #penetration_testing
Medium
Breaking It During a Hackathon
Worked on security testing for target.com with a team of four, this write-up highlights the bugs I found and how I approached them.
8 views
Daily Writeups
⤷ Title: BAC: THE Money-Making Machine
════════════════════════
𐀪 Author: Rajveer
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:40:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips #broken_access_control
Medium
BAC: THE Money-Making Machine
BAC is always my favorite and most of my bounties come from this vulnerability.
It always fascinates me to bypass the intended flow and…
10 views
Daily Writeups
⤷ Title: GitHub is a Search Engine for Secrets — and Nobody Told You
════════════════════════
𐀪 Author: Shah kaif
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 06:01:53 GMT
════════════════════════
⌗ Tags: #github_dork #bug_bounty_tips #osint #bug_bounty_writeup #bug_bounty
Medium
GitHub is a Search Engine for Secrets — and Nobody Told You
By Shah kaif | “Every leaked API key started as a commit someone thought was private.” | LinkedIn | Youtube
6 views
Daily Writeups
⤷ Title: Hi ReadMe.io
════════════════════════
𐀪 Author: shesha sai_c
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 17:10:15 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #vulnerability_management #vulnerability
Medium
Hi ReadMe.io
Summary:
7 views
Daily Writeups
⤷ Title: How Bug Bounty Hunters Are Using Claude Code.
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 09:01:57 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #claude_code #bug_bounty_tips #bug_bounty_writeup
Medium
How Bug Bounty Hunters Are Using Claude Code.
The community has been quietly building something powerful. I went and found it.
10 views
Daily Writeups
⤷ Title: ️ This Vulnerability Was Sitting in Front of Everyone — But No One Noticed
════════════════════════
𐀪 Author: Sukhveer Singh
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 05:37:38 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #cybersecurity #bug_bounty_writeup #bug_hunting
Medium
🕵️ This Vulnerability Was Sitting in Front of Everyone — But No One Noticed
Most bugs are hidden.
7 views
Daily Writeups
⤷ Title: What a Real Autonomous Recon Pipeline Looks Like
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 20:20:02 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #recon #automation #information_security
Medium
What a Real Autonomous Recon Pipeline Looks Like
If your pipeline doesn’t account for time, it’s already stale.
8 views
Daily Writeups
⤷ Title: Why Most Recon Pipelines Break After a Week
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 16:25:47 GMT
════════════════════════
⌗ Tags: #osint_investigation #recon #information_security #security #hacking
Medium
Why Most Recon Pipelines Break After a Week
Most people never notice because the output still looks technical.
6 views
Daily Writeups
⤷ Title: Subfinder Subdomains Dhundho Like an Elite Hacker! (Hinglish Mein)
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Sat, 28 Mar 2026 10:41:03 GMT
════════════════════════
⌗ Tags: #infosec #recon #cybersecurity #ethical_hacking #bug_bounty
Medium
Subfinder Subdomains Dhundho Like an Elite Hacker! (Hinglish Mein)
Series: Bug Bounty Zero se Hero 🦸 | Article #6 By HackerMD | 18 min read
7 views
Daily Writeups
⤷ Title: Microsoft Power BI API Credential Exposure: From Public Postman Workspace to Data Exfiltration in…
════════════════════════
𐀪 Author: Dzianis Skliar
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 11:02:23 GMT
════════════════════════
⌗ Tags: #osint #penetration_testing #api_security #recon
Medium
Microsoft Power BI API Credential Exposure: From Public Postman Workspace to Data Exfiltration in…
You don’t need to hack a government agency when its API credentials are already public.
13 views
Daily Writeups
⤷ Title: I Found a Bug That Could Delete Anyone’s Profile on a U.S. Navy Website
════════════════════════
𐀪 Author: Mohamed Adel
════════════════════════
ⴵ Time: Mon, 30 Mar 2026 00:22:12 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_bounty_writeup #bug_bounty_tips #bug_bounty #hacking
Medium
I Found a Bug That Could Delete Anyone’s Profile on a U.S. Navy Website
I was just poking around a U.S. Navy portal one afternoon when I stumbled across something that made me stop and double-check what I was…
14 views
Daily Writeups
⤷ Title: Exploiting Second-Order SQL Injection to Retrieve the Flag
════════════════════════
𐀪 Author: recoxy
════════════════════════
ⴵ Time: Sat, 28 Mar 2026 15:02:46 GMT
════════════════════════
⌗ Tags: #ctf_writeup #picoctf_2026 #bugbounty_writeup #hackerone #picoctf_2025
Medium
Exploiting Second-Order SQL Injection to Retrieve the Flag
Challenge Overview
7 views
Daily Writeups
⤷ Title: SQL Injection in PHP Reservation System — Breaking Access Control via a Single Parameter
════════════════════════
𐀪 Author: Cyber Tamarin
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup
Medium
SQL Injection in PHP Reservation System — Breaking Access Control via a Single Parameter
A critical SQL Injection vulnerability in manage_user.php leading to full database exposure.
8 views