Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: 1-HTML Injection Bug- Web Penetration Testing Series
════════════════════════
𐀪 Author: Hackerssg
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 21:08:22 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #html_injection #owasp_top_10 #penetration_testing #bug_bounty
Medium
1-HTML Injection Bug- Web Penetration Testing Series
This article explains HTML Injection in the most beginner-friendly way — with examples, real impact, and how to prevent it. Whether you’re…
36 views
Daily Writeups
⤷ Title: HTML Attribute Injection: Breaking Out of the Tag
════════════════════════
𐀪 Author: Issan
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 07:18:24 GMT
════════════════════════
⌗ Tags: #injection_attacks #cybersecurity #html_attribute #ethical_hacking #web_app_pentesting
Medium
🚀 HTML Attribute Injection: Breaking Out of the Tag
Target Application:
https://github.com/Yavuzlar/VulnLab/tree/main
49 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with nothing encoded
════════════════════════
𐀪 Author: jaejun835
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 05:31:20 GMT
════════════════════════
⌗ Tags: #csp #html #burpsuite #xs #portswigger
Medium
Lab: Reflected XSS into HTML context with nothing encoded
[Problem]
50 views
Daily Writeups
⤷ Title: Forcing an AI App to generate Payloads to Cause HTML Injection
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 01:11:07 GMT
════════════════════════
⌗ Tags: #html_injection #bug_bounty #cybersecurity #ai #bug_bounty_reports
Medium
Forcing an AI App to generate Payloads to Cause HTML Injection
Hi everyone, in this article, I’ll walk through a recent penetration test I conducted against a custom-built AI chatbot. As usual, we’ll…
11 views
Daily Writeups
⤷ Title: ️‍♂️ A Fun HTML Injection Story — When a “File Name” Became My Entry Point
════════════════════════
𐀪 Author: Diwas mundra
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 21:42:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #sql_injection #vulnerability #html_injection
Medium
🕵️‍♂️ A Fun HTML Injection Story — When a “File Name” Became My Entry Point
Sometimes, vulnerabilities don’t scream… They just quietly sit inside something as innocent as a file name field 😄
18 views
Daily Writeups
⤷ Title: Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:30:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_31938 #cybersecurity #HTML Injection #infosec #JavaScript Security #jsPDF #Vulnerability #web development #XSS
Daily CyberSecurity
Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
A critical 9.6 CVSS vulnerability in jsPDF (CVE-2026-31938) allows attackers to inject malicious scripts via XSS. Update to version 4.2.1 immediately.
22 views
Daily Writeups
⤷ Title: HTML Injection Bug Bounty: How I Found a Persistent Vulnerability on a Government of India Portal
════════════════════════
𐀪 Author: Vanshrathore
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:22:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #html_injection #pentesting #money #bug_hunting
Medium
HTML Injection Bug Bounty: How I Found a Persistent Vulnerability on a Government of India Portal
LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android
29 views
Daily Writeups
⤷ Title: From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
════════════════════════
𐀪 Author: Vanshrathore
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 15:18:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #html_injection #bug_hunting #money
Medium
🔥From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android
21 views
Daily Writeups
⤷ Title: How A Simple Bug That Refused to Die, Paid Twice.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sun, 26 Apr 2026 03:03:44 GMT
════════════════════════
⌗ Tags: #injection #ui_interaction #html #bug_bounty #inconsistencies
Medium
How A Simple Bug That Refused to Die, Paid Twice. 💰
⚠️ Disclaimer
21 views
Daily Writeups
⤷ Title: How A Simple Bug That Refused to Die, Paid Twice.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sun, 26 Apr 2026 03:03:42 GMT
════════════════════════
⌗ Tags: #injection #ui_interaction #html #bug_bounty #inconsistencies
Medium
How A Simple Bug That Refused to Die, Paid Twice. 💰
⚠️ Disclaimer
28 views
Daily Writeups
⤷ Title: bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sat, 09 May 2026 12:04:24 GMT
════════════════════════
⌗ Tags: #injection #owasp #html_injection #bwapp #bug_bounty
Medium
bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
HTML Injection is one of the most fundamental web application vulnerabilities and often serves as a stepping stone to more advanced attacks…
16 views
Daily Writeups
⤷ Title: HTML Should Have Embedded Markdown 30 Years Ago
════════════════════════
𐀪 Author: Outermostkt
════════════════════════
ⴵ Time: Sun, 17 May 2026 02:08:54 GMT
════════════════════════
⌗ Tags: #thariq #ai #xs #html #markdown
Medium
HTML Should Have Embedded Markdown 30 Years Ago
As you may know, there’s been a lot of buzz in the AI community lately about shifting back from Markdown to HTML. For instance, in articles…
19 views
Daily Writeups
⤷ Title: The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:00:53 GMT
════════════════════════
⌗ Tags: #html_injection #web_security #infosec #coffinxp #bug_bounty
Medium
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ A short recon story about a delayed HTML injection, a surprising phishing vector, and why every output channel …
6 views
Daily Writeups
⤷ Title: Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:04:27 +0000
════════════════════════
⌗ Tags: #Malware #Amatera Info Harvester #ClickFix Social Engineering LummaStealer #ClipBanker Crypto Stealer #CountLoader Staging Framework #Emmenhtal Loader #HTML Application HTA Payload #Living off the Land Binaries #MSHTA Weaponization Malware Delivery #mshta.exe Windows Binary #PurpleFox Rootkit Lineage
Penetration Testing Tools
Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
Threat actors are increasingly weaponizing MSHTA, a legacy Windows utility, as a highly efficient conduit to execute malicious
14 views
Daily Writeups
⤷ Title: HTML Injection in Outbound Emails: An Overlooked Security Risk
════════════════════════
𐀪 Author: vibhuti bhatt
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 12:26:37 GMT
════════════════════════
⌗ Tags: #html_injection #vulnerability #application_security #pentesting #injection_in_email
Medium
HTML Injection in Outbound Emails: An Overlooked Security Risk
Introduction
19 views
Daily Writeups
⤷ Title: Telegram Bots Receive Rich HTML and Markdown Formatting Options
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 08:44:45 +0000
════════════════════════
⌗ Tags: #Technology #bot development #HTML formatting #Markdown #Rich Text #Telegram Bots
Daily CyberSecurity
Telegram Bots Receive Rich HTML and Markdown Formatting Options
Pavel Durov recently announced expanded capabilities for all automated systems on the platform. Specifically, Telegram now supports intricate HTML and Markdown structures. Consequently, bots can g…
20 views