Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Comment une faille XSS peut vider un compte bancaire
════════════════════════
𐀪 Author: Istibarou DISSOU
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 12:44:38 GMT
════════════════════════
⌗ Tags: #web_application_security #cybersecurity #cross_site_scripting #web_security #ethical_hacking
Medium
Comment une faille XSS peut vider un compte bancaire
Le Cross-Site Scripting (XSS) est une vulnérabilité web qui permet à un attaquant d’injecter du code JavaScript malveillant dans une page…
21 views
Daily Writeups
⤷ Title: 6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in…
════════════════════════
𐀪 Author: inside Nikita's Mind
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 11:47:23 GMT
════════════════════════
⌗ Tags: #java_backend #api_security #cybersecurity #spring_boot_3 #spring_boot_security
Medium
6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in 2026)
Last month, one of my clients woke up to find their entire user database exposed. Not because of some sophisticated zero-day exploit. A…
41 views
Daily Writeups
⤷ Title: ☁️ From SSRF to Full AWS Takeover: A Hands-On Cloud Security Lab
════════════════════════
𐀪 Author: Ashutosh Hacks
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 12:44:05 GMT
════════════════════════
⌗ Tags: #cloud_security #aws #ssrf #web_security #cybersecurity
Medium
☁️ From SSRF to Full AWS Takeover: A Hands-On Cloud Security Lab
🚀 Introduction
55 views
Daily Writeups
⤷ Title: Zero Authentication, Total Control: Critical CVSS 10 Flaw Uncovered in Dgraph Database
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:42:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ACID Transactions #Admin Mutation #Authorization Bypass #CVE_2026_33976 #CVSS 10.0 #database security #Dgraph #graphql #infosec #lfi #Patch Alert #ssrf
Daily CyberSecurity
Zero Authentication, Total Control: Critical CVSS 10 Flaw Uncovered in Dgraph Database
Dgraph patches a critical 10.0 CVSS flaw (CVE-2026-33976). Unauthenticated attackers can overwrite databases and read local files. Update to v25.3.1 now!
44 views
Daily Writeups
⤷ Title: Hackers are Using “Legit” IT Tools to Hijack the 2026 Tax Season
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:27:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Tax Season #BEC #cybersecurity #identity theft #infosec #malware #phishing #Proofpoint #Remote Access #RMM #TA2730 #TA4922 #W_2 Fraud
Daily CyberSecurity
Hackers are Using "Legit" IT Tools to Hijack the 2026 Tax Season
Proofpoint identifies a surge in 2026 tax scams using RMM tools (39%) to bypass security. Learn how TA4922 and TA2730 target your data this filing season.
27 views
Daily Writeups
⤷ Title: Race Condition
════════════════════════
𐀪 Author: Ghost
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:31:24 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #hacking
Medium
Race Condition
Vulnerability
Race Condition

Theory
A race condition happens when a system gets confused because two actions occur at the same time…
21 views
Daily Writeups
⤷ Title: WireTapper Tool Explained | Wireless Device Detection & OSINT
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:28:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #blockchain #hacking #bug_bounty #web_development
Medium
WireTapper Tool Explained | Wireless Device Detection & OSINT
Wireless Device Detection & OSINT for Cybersecurity Professionals
23 views
Daily Writeups
⤷ Title: Unlimited Invites via Race Condition, invite limit bypass writeup
════════════════════════
𐀪 Author: Mohamed Mostafa (0xHafez)
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:08:31 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bug_bounty_tips
Medium
Unlimited Invites via Race Condition, invite limit bypass writeup
Note : The limit was 3 users
28 views
Daily Writeups
⤷ Title: What is Ethical Hacking? A Beginner-Friendly Guide (2026)
════════════════════════
𐀪 Author: Atul A Patil
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:25:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #ethical_hacking #programming #infosec
Medium
What is Ethical Hacking? A Beginner-Friendly Guide (2026)
In today’s digital world, everything is connected — banking, communication, business, and even our personal lives. But with this…
18 views
Daily Writeups
⤷ Title: Lab: Stored XSS into HTML context with nothing encoded
════════════════════════
𐀪 Author: Mohamed Jemmari
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 14:45:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #xss_attack #portswigger #cybersecurity
Medium
Lab: Stored XSS into HTML context with nothing encoded
This lab contains a stored XSS vulnerability in the comment functionality, first of all what’s stored XSS?, It’s also known as persistent…
16 views
Daily Writeups
⤷ Title: SunsetNoontide — UnrealIRCd Backdoor + Default Root Password | OffSec PG Play
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 14:30:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #linux #ctf
Medium
SunsetNoontide — UnrealIRCd Backdoor + Default Root Password | OffSec PG Play
SunsetNoontide is as straightforward as it gets. The box is running UnrealIRCd 3.2.8.1 — a version with a well-documented backdoor that was…
24 views
Daily Writeups
⤷ Title: Top 10 Best Places to Learn Cybersecurity in Nigeria (2026 Guide)
════════════════════════
𐀪 Author: Miaztechacademy
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:45:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #tech
Medium
Top 10 Best Places to Learn Cybersecurity in Nigeria (2026 Guide)
Cybersecurity is no longer just a tech niche — it is one of the most in-demand and high-paying career paths globally, and Nigeria is no…
30 views
Daily Writeups
⤷ Title: The Reign of Spades ♠️ — Part 1 : Breaking h4k-it CTF Challenges
════════════════════════
𐀪 Author: 3xploiter
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 13:13:48 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #ctf_writeup #ctf #ethical_hacking #cybersecurity
Medium
The Reign of Spades ♠️ — Part 1 : Breaking h4k-it CTF Challenges
In this series, I’ll be walking through how I solved a selection of challenges from the h4k-it CTF — The Reign of Spades ♠.
34 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with nothing encoded
════════════════════════
𐀪 Author: Mohamed Jemmari
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 14:30:02 GMT
════════════════════════
⌗ Tags: #web_security_testing #xs #pentesting #portswigger #portswigger_lab
Medium
Lab: Reflected XSS into HTML context with nothing encoded
Hello everyone, I hope you are doing good, so I will publish write-ups for portswigger Labs from now on, I’m gonna start with XSS then move…
48 views
Daily Writeups
⤷ Title: BrowserGate: LinkedIn Tracks 6,000+ Browser Extensions on Users’ PCs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:16:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Surveillance #BrowserGate #Cybersecurity #HUMAN Security #LinkedIn #Microsoft
Hackread
BrowserGate: LinkedIn Tracks 6,000+ Browser Extensions on Users’ PCs
LinkedIn is accused in the BrowserGate report of tracking 6,000+ browser extensions on users’ PCs, raising concerns over privacy and data collection practices.
38 views
Daily Writeups
⤷ Title: The $17 Million Bounty: Google Smashes Records and Launches AI Frontier for 15th VRP Anniversary
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:16:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2025 Security Report #AI security #bug bounty #bugSWAT #Cyber Rewards #ESCAL8 #Google Cloud #Google VRP #Google VRP 15th Anniversary #infosec #Patch Rewards #Vulnerability Research
Daily CyberSecurity
The $17 Million Bounty: Google Smashes Records and Launches AI Frontier for 15th VRP Anniversary
Google’s 2025 VRP hit an all-time high with $17.1M in payouts. Discover how the new AI VRP and elite bugSWAT events are shaping the future of security.
34 views
Daily Writeups
⤷ Title: From Uploading a “PDF” To Owning The Admin Account
════════════════════════
𐀪 Author: Rehan Ansari
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:46:36 GMT
════════════════════════
⌗ Tags: #owasp #file_upload_vulnerability #bug_bounty #account_takeover #stored_xss
Medium
From Uploading a “PDF” To Owning The Admin Account💀
How a Tiny Upload Bug Turned into a Full-Admin Account Takeover
28 views
Daily Writeups
⤷ Title: How to Use ChatGPT for Bug Bounty (The Intelligent Way, NOT The Lazy One) | kidnapshadow
════════════════════════
𐀪 Author: Kidnapshadow
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:42:46 GMT
════════════════════════
⌗ Tags: #ai #chatgpt #kidnapshadow #bug_bounty #hacking
Medium
How to Use ChatGPT for Bug Bounty (The Intelligent Way, NOT The Lazy One) | kidnapshadow
Finding and exploiting software bugs for money sounds easy, doesn’t it?
26 views
Daily Writeups
⤷ Title: HTB Support
════════════════════════
𐀪 Author: Dipesh Paul
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:53:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #ethical_hacking #penetration_testing #hacking
Medium
HTB Support
Platform: Hack The Box Difficulty: Easy OS: Windows Topics: SMB Enumeration, .NET Reverse Engineering, LDAP Querying, WinRM, BloodHound…
17 views
Daily Writeups
⤷ Title: Burp Suite for Beginners: A Complete Guide to Web Security Testing
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:48:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #web_security #bug_bounty #ethical_hacking
Medium
Burp Suite for Beginners: A Complete Guide to Web Security Testing
If you’re starting your journey in cybersecurity, bug bounty hunting, or penetration testing, learning Burp Suite is one of the most…
15 views
Daily Writeups
⤷ Title: Broken Authentication — How Simple Login Flaws Lead to Account Takeover (P1 Guide)
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:35:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #bugbounty_writeup #bug_bounty_tips #cybersecurity
Medium
🔐 Broken Authentication — How Simple Login Flaws Lead to Account Takeover (P1 Guide)
“A practical guide to identifying login, reset, and session flaws that lead to real account takeovers”
20 views