Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:15:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_39363 #CVE_2026_39364 #cybersecurity #Dev Tools #Frontend Development #HMR #infosec #javascript #Vite #Web Security
Daily CyberSecurity
Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server
Vite patches critical flaws (CVE-2026-39364 & CVE-2026-39363) allowing arbitrary file reads and .env leaks via WebSockets and query params. Upgrade to 8.0.5!
10 views
Daily Writeups
⤷ Title: CAPTCHA Misconfiguration Leading to Replay-Based Authentication Bypass | Cyber Tamarin
════════════════════════
𐀪 Author: Cyber Tamarin
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:18:47 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #ethical_hacking #cybersecurity
Medium
CAPTCHA Misconfiguration Leading to Replay-Based Authentication Bypass | Cyber Tamarin
It looked secure… until I stopped trusting the frontend.
14 views
Daily Writeups
⤷ Title: How I Bypassed 2FA Reconfiguration Using Response Manipulation — My First Bug Bounty
════════════════════════
𐀪 Author: Mohamed Elmorsy
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:00:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bugs #bug_bounty_writeup #bug_bounty
Medium
How I Bypassed 2FA Reconfiguration Using Response Manipulation — My First Bug Bounty
“How I Bypassed 2FA Reconfiguration Using Response Manipulation — My First Bug Bounty” is published by Mohamed Elmorsy.
18 views
Daily Writeups
⤷ Title: The “Select-Your-User” Flaw: A Tale of Broken Access Control
════════════════════════
𐀪 Author: Omkapri
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:08:37 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #qseap #bug_bounty #application_security
Medium
The “Select-Your-User” Flaw: A Tale of Broken Access Control
When we think of web hacking, we often imagine complex SQL injections or sophisticated Cross-Site Scripting (XSS) payloads. However, some…
11 views
Daily Writeups
⤷ Title: WordPress Security Checklist: How to Protect Your Website from Hackers
════════════════════════
𐀪 Author: Jude Anewuoh
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:15:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #wordpress_themes #wordpress #wordpress_plugins
Medium
WordPress Security Checklist: How to Protect Your Website from Hackers
WordPress powers almost 40% of all websites on the internet. Meaning 4 in every 10 websites on the internet run WordPress, making it an…
8 views
Daily Writeups
⤷ Title: The 3TB Wake-Up Call: Why Nigeria’s Data Kingdom Is Burning in Plain Sight
════════════════════════
𐀪 Author: Epistemus
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:56:59 GMT
════════════════════════
⌗ Tags: #hacking #nigeria #hacker
Medium
The 3TB Wake-Up Call: Why Nigeria’s Data Kingdom Is Burning in Plain Sight
The news broke like a thunderclap on April 2, 2026. A hacker operating under the alias “ByteToBreach” published over 3 terabytes of…
12 views
Daily Writeups
⤷ Title: Pico ctf write-up Web Exploitation(Old Sessions)
════════════════════════
𐀪 Author: Blacklotus
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:39:24 GMT
════════════════════════
⌗ Tags: #ctf #picoctf #webhack #hacking
Medium
Pico ctf write-up Web Exploitation(Old Sessions)
Upon opening the website, we are greeted with a login page containing two buttons: Login and Register. I clicked on Register to explore…
10 views
Daily Writeups
⤷ Title: DOM XSS in jQuery anchor href attribute sink using location.search source(Simple + Practical Guide)
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:12:40 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #portswigger
Medium
DOM XSS in jQuery anchor href attribute sink using location.search source(Simple + Practical Guide)
I solved a DOM XSS lab where user input is used to modify a link (href) using jQuery.
At first it was confusing, but once I understood the…
9 views
Daily Writeups
⤷ Title: TryHackMe Built an AI Pentester Using Your Behavior Data. Here’s the Full Story.
════════════════════════
𐀪 Author: Dfaults
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:34:03 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #privacy #technology #cybersecurity
Medium
TryHackMe Built an AI Pentester Using Your Behavior Data. Here’s the Full Story.
NoScope, consent, and what this controversy reveals about every platform you’re trusting with your learning data.
8 views
Daily Writeups
⤷ Title: Understanding CWE-347: Improper Verification of Cryptographic Signature
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #cwe #cybersecurity #infosec #software_development #hacking
Medium
Understanding CWE-347: Improper Verification of Cryptographic Signature
Cryptographic signatures are used to verify that data comes from a trusted source and has not been tampered with. When an application…
8 views
Daily Writeups
⤷ Title: Argus: Building a Linux Kernel Rootkit Detection Module
════════════════════════
𐀪 Author: Ananthanr Off
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:33:43 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #rootkit #systems_programming #linux_kernel
Medium
Argus: Building a Linux Kernel Rootkit Detection Module
Argus is a Linux kernel rootkit detector using cross-view analysis to uncover hidden system activity.
13 views
Daily Writeups
⤷ Title: The GRC Technician and the Death of the Check-Box: A Manifesto for Australian Cyber…
════════════════════════
𐀪 Author: John Rouffas
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:57:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #infosec #risk_management #cyberpath
Medium
The GRC Technician and the Death of the Check-Box: A Manifesto for Australian Cyber Professionalisation
The Australian national consultation on cybersecurity workforce professionalisation has spent a lot of time on “machinery” — registration…
11 views
Daily Writeups
⤷ Title: Android Content Provider Security: Exploiting File Providers (Pentester Deep Dive — Part 4)
════════════════════════
𐀪 Author: Mustafa Mohamed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:13:53 GMT
════════════════════════
⌗ Tags: #fileprovider #penetration_testing #mobile_pentesting #mobile_app_security #android_app_security
Medium
Android Content Provider Security: Exploiting File Providers (Pentester Deep Dive — Part 4)
Introduction
17 views
Daily Writeups
⤷ Title: ContainMe TryHackMe Walkthrough | by Yoel Yosief
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:11:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_exploitation #tryhackme_walkthrough #lfi_vulnerability #ctf
Medium
ContainMe TryHackMe Walkthrough | by Yoel Yosief
Hack into me and look for the hidden flag. Look beyond the horizon.
5 views
Daily Writeups
⤷ Title: Mystic C2 Server — 101
════════════════════════
𐀪 Author: Miraç Küçük
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:40:48 GMT
════════════════════════
⌗ Tags: #penetration_testing #malware #c2_server #ethical_hacking #red_team
Medium
Introduction to the C2 Server — Mythic C2 Server — 101
Welcome to the first article of the Mythic C2 Server series.
7 views
Daily Writeups
⤷ Title: Mystic C2 Server - 101 (TR)
════════════════════════
𐀪 Author: Miraç Küçük
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:12:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #red_team #penetration_testing #c2_server #malware
8 views
Daily Writeups
⤷ Title: Elastic: Using Elastic Defend Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:17:28 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #blue_team #cybersecurity
Medium
Elastic: Using Elastic Defend Walkthrough Notes | TryHackMe
Elastic Defend walkthrough covering logs alerts and threat detection basics
12 views
Daily Writeups
⤷ Title: Pickle Rick | TryHackMe CTF Writeup
════════════════════════
𐀪 Author: Debmalya Mondal⚡
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:54:09 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf #ctf_writeup #tryhackme_writeup #tryhackme
Medium
Pickle Rick | TryHackMe CTF Writeup
A Rick and Morty CTF. Help turn Rick back into a human!
12 views
Daily Writeups
⤷ Title: Hip Flask Tryhackme Room Writeup
════════════════════════
𐀪 Author: MainEkHacker
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:16:01 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #tryhackme #ethical_hacking #tryhackme_writeup
16 views
Daily Writeups
⤷ Title: Visible Error-Based SQL Injection: Leaking Data Through PostgreSQL Errors
════════════════════════
𐀪 Author: Mohamed Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:50:21 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #cybersecurity #web_security #sql_injection
20 views
Daily Writeups
⤷ Title: Certified Linux training and internship program for beginners
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:21:21 GMT
════════════════════════
⌗ Tags: #education #ethical_hacking #cybersecurity_training #linux #cybersecurity
27 views