Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with nothing encoded
════════════════════════
𐀪 Author: Mohamed Jemmari
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 14:30:02 GMT
════════════════════════
⌗ Tags: #web_security_testing #xs #pentesting #portswigger #portswigger_lab
Medium
Lab: Reflected XSS into HTML context with nothing encoded
Hello everyone, I hope you are doing good, so I will publish write-ups for portswigger Labs from now on, I’m gonna start with XSS then move…
48 views
Daily Writeups
⤷ Title: BrowserGate: LinkedIn Tracks 6,000+ Browser Extensions on Users’ PCs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:16:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Surveillance #BrowserGate #Cybersecurity #HUMAN Security #LinkedIn #Microsoft
Hackread
BrowserGate: LinkedIn Tracks 6,000+ Browser Extensions on Users’ PCs
LinkedIn is accused in the BrowserGate report of tracking 6,000+ browser extensions on users’ PCs, raising concerns over privacy and data collection practices.
38 views
Daily Writeups
⤷ Title: The $17 Million Bounty: Google Smashes Records and Launches AI Frontier for 15th VRP Anniversary
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:16:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2025 Security Report #AI security #bug bounty #bugSWAT #Cyber Rewards #ESCAL8 #Google Cloud #Google VRP #Google VRP 15th Anniversary #infosec #Patch Rewards #Vulnerability Research
Daily CyberSecurity
The $17 Million Bounty: Google Smashes Records and Launches AI Frontier for 15th VRP Anniversary
Google’s 2025 VRP hit an all-time high with $17.1M in payouts. Discover how the new AI VRP and elite bugSWAT events are shaping the future of security.
34 views
Daily Writeups
⤷ Title: From Uploading a “PDF” To Owning The Admin Account
════════════════════════
𐀪 Author: Rehan Ansari
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:46:36 GMT
════════════════════════
⌗ Tags: #owasp #file_upload_vulnerability #bug_bounty #account_takeover #stored_xss
Medium
From Uploading a “PDF” To Owning The Admin Account💀
How a Tiny Upload Bug Turned into a Full-Admin Account Takeover
28 views
Daily Writeups
⤷ Title: How to Use ChatGPT for Bug Bounty (The Intelligent Way, NOT The Lazy One) | kidnapshadow
════════════════════════
𐀪 Author: Kidnapshadow
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:42:46 GMT
════════════════════════
⌗ Tags: #ai #chatgpt #kidnapshadow #bug_bounty #hacking
Medium
How to Use ChatGPT for Bug Bounty (The Intelligent Way, NOT The Lazy One) | kidnapshadow
Finding and exploiting software bugs for money sounds easy, doesn’t it?
26 views
Daily Writeups
⤷ Title: HTB Support
════════════════════════
𐀪 Author: Dipesh Paul
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:53:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #ethical_hacking #penetration_testing #hacking
Medium
HTB Support
Platform: Hack The Box Difficulty: Easy OS: Windows Topics: SMB Enumeration, .NET Reverse Engineering, LDAP Querying, WinRM, BloodHound…
17 views
Daily Writeups
⤷ Title: Burp Suite for Beginners: A Complete Guide to Web Security Testing
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:48:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #web_security #bug_bounty #ethical_hacking
Medium
Burp Suite for Beginners: A Complete Guide to Web Security Testing
If you’re starting your journey in cybersecurity, bug bounty hunting, or penetration testing, learning Burp Suite is one of the most…
15 views
Daily Writeups
⤷ Title: Broken Authentication — How Simple Login Flaws Lead to Account Takeover (P1 Guide)
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:35:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #bugbounty_writeup #bug_bounty_tips #cybersecurity
Medium
🔐 Broken Authentication — How Simple Login Flaws Lead to Account Takeover (P1 Guide)
“A practical guide to identifying login, reset, and session flaws that lead to real account takeovers”
20 views
Daily Writeups
⤷ Title: ️ API Pentesting Mastery Series - Part 1: Essential Tools for Interacting with APIs ️
════════════════════════
𐀪 Author: ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:32:08 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #bug_bounty #cybersecurity #bug_bounty_tips #api
Medium
🛡️ API Pentesting Mastery Series - Part 1: Essential Tools for Interacting with APIs 🛠️
जय श्री राम 🚩 ,Hackers
15 views
Daily Writeups
⤷ Title: Part 6: Feedback Loops: Wiring Your AppSec Pipeline to Learn from Itself
════════════════════════
𐀪 Author: Aparna Ash Himmatramka
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:01:01 GMT
════════════════════════
⌗ Tags: #ai #information_security #application_security #security #cybersecurity
Medium
Part 6: Feedback Loops: Wiring Your AppSec Pipeline to Learn from Itself
Part 6: Feedback Loops: Wiring Your AppSec Pipeline to Learn from Itself Tying in the final piece of systemic elimination and scaled judgement. Part 6 of the Assisted Continuous Assurance series — …
18 views
Daily Writeups
⤷ Title: Introduction to Portable Executable — NIR(6)
════════════════════════
𐀪 Author: 0xNirSec
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:17:51 GMT
════════════════════════
⌗ Tags: #malware_development #cybersecurity #hacking #malware #security
Medium
Introduction to Portable Executable — NIR(6)
Hello, Cybersecurity ethusiasts and white hat hackers !!
16 views
Daily Writeups
⤷ Title: Water Bottle (THM) Tryhackme Walkthrough and Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:36:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ctf_writeup #osint #tryhackme
Medium
Water Bottle (THM) Tryhackme Walkthrough and Answer
Description : Track down a vanished water station using nothing but fragments of memory and OSINT.
20 views
Daily Writeups
⤷ Title: Building an Operating System from Scratch — Part 0: Introduction
════════════════════════
𐀪 Author: Hack-Bat
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:31:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #hardware #operating_systems #software_development #hacking
Medium
Building an Operating System from Scratch — Part 0: Introduction
Why Build an Operating System?
32 views
Daily Writeups
⤷ Title: If I Were an Attacker: Breaking OTP Authentication Systems
════════════════════════
𐀪 Author: Mukut | Real-World Cybersecurity
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 16:41:22 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #web_security #cybersecurity #penetration_testing
Medium
If I Were an Attacker: Breaking OTP Authentication Systems
One-Time Password (OTP) authentication is widely used to strengthen login security.
46 views
Daily Writeups
⤷ Title: Juice Shop Write-up: Login Jim Challenge
════════════════════════
𐀪 Author: ~ Jeff ~
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 14:54:26 GMT
════════════════════════
⌗ Tags: #sql_injection #web_penetration_testing #owasp_juice_shop
Medium
Juice Shop Write-up: Login Jim Challenge
The goal of this challenge is to gain unauthorized access to Jim’s account by exploiting a SQL Injection vulnerability in the login…
❤1
42 views
Daily Writeups
⤷ Title: Information Disclosure Through Unrestricted API Endpoints
════════════════════════
𐀪 Author: DrRobik
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 18:11:17 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_disclosure #access_control #privilege_escalation #bug_bounty
Medium
Information Disclosure Through Unrestricted API Endpoints
During one of my usual bug hunting sessions, I was exploring a website that I’ll call target.com to keep things anonymous. I was testing…
38 views
Daily Writeups
⤷ Title: I thought I had a P1, but… the second paid valid bug in 2026
════════════════════════
𐀪 Author: Hoi Huynh
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 17:45:19 GMT
════════════════════════
⌗ Tags: #pentesting #hacking #bug_bounty #hacker
Medium
I thought I had a P1, but… the second paid valid bug in 2026
It’s me, c0nyy. This is a my journey with the second paid valid bug in 2026, fasten your seatbelt and… just relax.
28 views
Daily Writeups
⤷ Title: How to Install Claude AI on Kali Linux
════════════════════════
𐀪 Author: Fx03
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 17:10:50 GMT
════════════════════════
⌗ Tags: #hacking #kali_linux #bug_hunting #cybersecurity #bug_bounty
Medium
How to Install Claude AI on Kali Linux
Claude AI by Anthropic can be used on Kali Linux by accessing its API through Python. By installing required packages, setting up an API…
16 views
Daily Writeups
⤷ Title: HTB Timelapse
════════════════════════
𐀪 Author: Dipesh Paul
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 17:10:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #hackthebox #ethical_hacking #hacking #bug_bounty
Medium
HTB Timelapse
Platform: Hack The Box Difficulty: Easy OS: Windows Topics: SMB Enumeration, Password Cracking (John the Ripper), PFX Certificate…
16 views
Daily Writeups
⤷ Title: Left Security Testing (DevSecQA)
════════════════════════
𐀪 Author: Savithasjois
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 17:26:30 GMT
════════════════════════
⌗ Tags: #security #code #software_development #application_security #quality_assurance
Medium
Left Security Testing (DevSecQA)
our QA Team Is Your Last Line of Defense. And They’re Not Ready.
12 views
Daily Writeups
⤷ Title: ReconOverlay: Catching CVEs, Exploit Paths, and Version Clues in Real Time
════════════════════════
𐀪 Author: HRK
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 18:29:40 GMT
════════════════════════
⌗ Tags: #enumeration #ctf #capture_the_flag #hacking #vulnerability
Medium
ReconOverlay: Catching CVEs, Exploit Paths, and Version Clues in Real Time
Speed matters.
14 views