Daily Writeups
@Daily_Writeups
3.81K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.81K subscribers
Daily Writeups
⤷ Title: Microsoft Power BI API Credential Exposure: From Public Postman Workspace to Data Exfiltration in…
════════════════════════
𐀪 Author: Dzianis Skliar
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 11:02:23 GMT
════════════════════════
⌗ Tags: #osint #penetration_testing #api_security #recon
Medium
Microsoft Power BI API Credential Exposure: From Public Postman Workspace to Data Exfiltration in…
You don’t need to hack a government agency when its API credentials are already public.
15 views
Daily Writeups
⤷ Title: I Found a Bug That Could Delete Anyone’s Profile on a U.S. Navy Website
════════════════════════
𐀪 Author: Mohamed Adel
════════════════════════
ⴵ Time: Mon, 30 Mar 2026 00:22:12 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_bounty_writeup #bug_bounty_tips #bug_bounty #hacking
Medium
I Found a Bug That Could Delete Anyone’s Profile on a U.S. Navy Website
I was just poking around a U.S. Navy portal one afternoon when I stumbled across something that made me stop and double-check what I was…
16 views
Daily Writeups
⤷ Title: Exploiting Second-Order SQL Injection to Retrieve the Flag
════════════════════════
𐀪 Author: recoxy
════════════════════════
ⴵ Time: Sat, 28 Mar 2026 15:02:46 GMT
════════════════════════
⌗ Tags: #ctf_writeup #picoctf_2026 #bugbounty_writeup #hackerone #picoctf_2025
Medium
Exploiting Second-Order SQL Injection to Retrieve the Flag
Challenge Overview
7 views
Daily Writeups
⤷ Title: SQL Injection in PHP Reservation System — Breaking Access Control via a Single Parameter
════════════════════════
𐀪 Author: Cyber Tamarin
════════════════════════
ⴵ Time: Fri, 27 Mar 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup
Medium
SQL Injection in PHP Reservation System — Breaking Access Control via a Single Parameter
A critical SQL Injection vulnerability in manage_user.php leading to full database exposure.
8 views
Daily Writeups
⤷ Title: From Recon to Critical: Finding an Unauthenticated Security Dashboard ($1895 Bug Bounty)
════════════════════════
𐀪 Author: Vaibhav Kumar Srivastava
════════════════════════
ⴵ Time: Thu, 26 Mar 2026 18:33:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #security #hacking #cybersecurity
Medium
From Recon to Critical: Finding an Unauthenticated Security Dashboard ($1895 Bug Bounty)
Introduction
12 views
Daily Writeups
⤷ Title: A Comprehensive VAPT Methodology Applied in Practical Security Assessments
════════════════════════
𐀪 Author: Ayushmohansah
════════════════════════
ⴵ Time: Thu, 26 Mar 2026 14:24:48 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #red_team #hacking #methodology #vapt
Medium
A Comprehensive VAPT Methodology Applied in Practical Security Assessments
Introduction
11 views
Daily Writeups
⤷ Title: Side Hustles for Cybersecurity Professionals: Bug Bounties, Consulting, Content & Training
════════════════════════
𐀪 Author: ATNO For Cybersecurity | Hacking
════════════════════════
ⴵ Time: Wed, 25 Mar 2026 07:44:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup #freelancing #side_hustle
Medium
💰 Side Hustles for Cybersecurity Professionals: Bug Bounties, Consulting, Content & Training
🐛 Bug Bounty Hunting
13 views
Daily Writeups
⤷ Title: XPFarm: Top 10 AI Tools for Cybersecurity Automation
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Tue, 24 Mar 2026 14:51:27 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #web_development #hacking #ai
Medium
XPFarm: Top 10 AI Tools for Cybersecurity Automation 🚀
The Future of Ethical Hacking, Powered by AI
18 views
Daily Writeups
⤷ Title: From Stored XSS to Cookie Tossing into Credit Card Theft
════════════════════════
𐀪 Author: 3NVZ
════════════════════════
ⴵ Time: Tue, 24 Mar 2026 01:09:22 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bugbounty_writeup #bug_bounty_tips
Medium
From Stored XSS to Cookie Tossing into Credit Card Theft
Hello Everyone, we are back again!
15 views
Daily Writeups
⤷ Title: What Actually Happens When You Go Looking for API Keys in JavaScript
════════════════════════
𐀪 Author: DrRobik
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 19:49:06 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bug_bounty_tips #penetration_testing_tools #subdomains_enumeration #api
Medium
What Actually Happens When You Go Looking for API Keys in JavaScript
When I first started doing recon, I thought the process was pretty straightforward — run a few tools, collect data, and somewhere in there…
17 views
Daily Writeups
⤷ Title: APNs Token Registration Issues on iOS A Complete Debugging Journey
════════════════════════
𐀪 Author: Obioma Godswill Michael
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 16:55:38 GMT
════════════════════════
⌗ Tags: #flutter_app_development #bug_bounty_tips #ios_app_development
Medium
APNs Token Registration Issues on iOS A Complete Debugging Journey
How a missing entitlement, a corrupted project file, and a few wrong paths cost hours of debugging and exactly how i fixed every single…
15 views
Daily Writeups
⤷ Title: Mobile Deep Link Exploitation: The Hidden Attack Surface Nobody Talks About
════════════════════════
𐀪 Author: Being_brutlix
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 04:27:33 GMT
════════════════════════
⌗ Tags: #android_pentesting #bug_bounty_tips #exported_true #deep_link_android
Medium
Mobile Deep Link Exploitation: The Hidden Attack Surface Nobody Talks About
INTRODUCTION
22 views
Daily Writeups
⤷ Title: How I Found a Subdomain Takeover via BetterUptime
════════════════════════
𐀪 Author: Rahimahaq
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 17:35:36 GMT
════════════════════════
⌗ Tags: #web_app_pentesting #bug_bounty_tips #subdomain_takeover
20 views
Daily Writeups
⤷ Title: ️Unmasking the Battlefield: Understanding the Professional Hacker Mindset
════════════════════════
𐀪 Author: ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 15:18:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #cyber_security_awareness #writing
Medium
🛡️Unmasking the Battlefield: Understanding the Professional Hacker Mindset
जय श्री राम 🚩 ,Hackers
21 views
Daily Writeups
⤷ Title: From Key to Chaos: How a JS Key Breaks Notification Security
════════════════════════
𐀪 Author: Rushikesh Kaware
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 13:31:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #web_security #bug_bounty #javascript
Medium
From Key to Chaos: How a JS Key Breaks Notification Security
A real-world auth bypass where an exposed JavaScript key allowed unauthorized access to a notification system.
33 views
Daily Writeups
⤷ Title: Discover Hidden Attack Surfaces with FFUF Fuzzing
════════════════════════
𐀪 Author: Cyb3rV0lt
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 07:17:18 GMT
════════════════════════
⌗ Tags: #ffuf #directory_brute_force #bug_bounty_tips #fuzzing #cybersecurity
Medium
🔍 Discover Hidden Attack Surfaces with FFUF Fuzzing
In the world of web application security, attackers don’t just look at what’s visible — they dig deeper to uncover hidden endpoints…
50 views
Daily Writeups
⤷ Title: BUG BOUNTY from Zero To Hero! All secrects finally revealed !! @lazyhackerbd
════════════════════════
𐀪 Author: Lazyhackerbd
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 14:29:21 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty_writeup #bugbounty_writeup #bug_bounty
Medium
BUG BOUNTY from Zero To Hero! All secrects finally revealed !! @lazyhackerbd
“Recon is not just a phase — it’s a mindset. And automation is what turns that mindset into a system.”
40 views
Daily Writeups
⤷ Title: Spring AI: CVE-2026-22738 (THM) Tryhackme WriteUp All Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 14:07:23 GMT
════════════════════════
⌗ Tags: #spring_ai #hacking #cybersecurity #cve_2026_22738 #tryhackme
Medium
Spring AI: CVE-2026-22738 (THM) Tryhackme WriteUp All Answer
Description : Exploit CVE-2026–22738: unauthenticated RCE via SpEL injection in Spring AI’s SimpleVectorStore.
30 views
Daily Writeups
⤷ Title: Conversor [H.T.B] machine Writeup :
════════════════════════
𐀪 Author: Amrou bekhedda
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 14:03:16 GMT
════════════════════════
⌗ Tags: #ctf_writeup #cybersecurity #information_security #infosec #hacking
Medium
Conversor [H.T.B] machine Writeup :
. بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
22 views
Daily Writeups
⤷ Title: Secure Facebook & Social Apps in 5 Minutes
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 13:51:15 GMT
════════════════════════
⌗ Tags: #social_media #hacking #asrbd
Medium
Secure Facebook & Social Apps in 5 Minutes
Let’s be real.
24 views
Daily Writeups
⤷ Title: Growing Fast Is Exciting. It’s Also When Most Businesses Get Hacked.
════════════════════════
𐀪 Author: AnantNetra Technologies
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 13:45:09 GMT
════════════════════════
⌗ Tags: #ai #hacking #small_business #business #cybersecurity
Medium
Growing Fast Is Exciting. It’s Also When Most Businesses Get Hacked.
The season of biggest opportunity is also the season of biggest vulnerability. Here’s why and what to do about it.
15 views