Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: ️ The 2026 Web3 Security Roadmap
════════════════════════
𐀪 Author: Tabrez Mukadam
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:24:12 GMT
════════════════════════
⌗ Tags: #blockchain #ethereum #web3 #bug_bounty #cybersecurity
Medium
🗺️ The 2026 Web3 Security Roadmap: How to Stop Chasing XSS and Start Auditing Smart Contracts
How to Stop Chasing XSS and Start Auditing Smart Contracts
25 views
Daily Writeups
⤷ Title: Learning About Post-message Vulnerabilities
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:51:06 GMT
════════════════════════
⌗ Tags: #javascript #programming #cybersecurity #ethical_hacking #bug_bounty
Medium
Learning About Post-message Vulnerabilities
Note: I’m writing this as personal learning notes, not a generic article please keep that in mind. Also, I used AI for rephrasing and…
23 views
Daily Writeups
⤷ Title: NoSQL Injection: How I Turned ?search= Into an Admin Oracle
════════════════════════
𐀪 Author: Thomas Youssef
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:28:19 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #penetration_testing #bug_bounty #info_sec_writeups #cybersecurity
Medium
NoSQL Injection: How I Turned ?search= Into an Admin Oracle
Hello friend, I’m Thomas Youssef — and this one is a little different from my usual access control writeups. No role swapping. No token…
19 views
Daily Writeups
⤷ Title: How I found a $5,000 Command Injection via an RSS validator
════════════════════════
𐀪 Author: Yazeed Bilal
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 02:05:53 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bug_bounty_tips #bugs
Medium
RSS Feed Validator to RCE 🤯
Hello everyone,
14 views
Daily Writeups
⤷ Title: Empline (THM) Tryhackme WriteUp With Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:32:12 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_writeup #privilege_escalation #hacking #cybersecurity
Medium
Empline (THM) Tryhackme WriteUp With Answer
Description : Are you good enough to apply for this job?
14 views
Daily Writeups
⤷ Title: Ethical Hacking vs Criminal Hacking: What’s the Difference?
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:25:49 GMT
════════════════════════
⌗ Tags: #hacking #cyber_awareness #asrbd
Medium
Ethical Hacking vs Criminal Hacking: What’s the Difference?
When people hear the word “hacker,” they often imagine a criminal sitting in a dark room breaking into systems.
15 views
Daily Writeups
⤷ Title: Shady Oaks Financial (JWT) Bugforge.io
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 07:54:08 GMT
════════════════════════
⌗ Tags: #hacking #jwt #jwt_token #ctf #jwt_authentication
Medium
Shady Oaks Financial (JWT) Bugforge.io
Thanks for following along!
14 views
Daily Writeups
⤷ Title: Come iniziare con il Penetration Testing nel 2025: una roadmap pratica
════════════════════════
𐀪 Author: Caniocampa
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 07:01:36 GMT
════════════════════════
⌗ Tags: #offensive_security #cybersecurity #hacking
Medium
Come iniziare con il Penetration Testing nel 2025: una roadmap pratica
Il penetration testing non si impara leggendo libri.
13 views
Daily Writeups
⤷ Title: PortSwigger Lab: Information disclosure in version control history
════════════════════════
𐀪 Author: Nikhil Bhandari
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:24:41 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #portswigger_lab #portswigger #cybersecurity
Medium
PortSwigger Lab: Information disclosure in version control history
Hello everyone! Nikhil Bhandari here. Today, I’ll be sharing a step-by-step guide on how to solve the PortSwigger Lab: Authentication…
18 views
Daily Writeups
⤷ Title: METATRON — Open-Source AI Penetration Testing Assistant Bringing Local LLM Analysis to Linux
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 07:14:36 GMT
════════════════════════
⌗ Tags: #penetration_testing #artificial_intelligence #cybersecurity #red_team #ethical_hacking
Medium
METATRON — Open-Source AI Penetration Testing Assistant Bringing Local LLM Analysis to Linux
As AI continues to reshape cybersecurity, a new class of tools is emerging — private, offline, and intelligent. One of the most…
18 views
Daily Writeups
⤷ Title: TryHackMe — One Piece — Ctf
════════════════════════
𐀪 Author: Avshivapriyan
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:58:52 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #ctf_writeup #cybersecurity #ctf #tryhackme
Medium
TryHackMe — One Piece — Ctf
Port scan
19 views
Daily Writeups
⤷ Title: Tryhackme: Linux Fundamentals
════════════════════════
𐀪 Author: Ikhlasdansantai
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 07:46:10 GMT
════════════════════════
⌗ Tags: #tryhackme #terminal #cybersecurity #kitty #linux
Medium
Tryhackme: Linux Fundamentals
What I’ve learned
30 views
Daily Writeups
⤷ Title: File Upload Vulnerability /Privilege escalations on Twiki(playmode)
════════════════════════
𐀪 Author: Goldsploit
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:31:59 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
File Upload Vulnerability /Privilege escalations on Twiki(playmode)
Accessed the webpage on port 80, clicked on TWiki went through other links,but let’s click on get started
41 views
Daily Writeups
⤷ Title: The “Seal of Approval” Trap: How Hackers are Hijacking GitHub and Jira Notifications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 09:15:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Credential Harvesting #cybersecurity #GitHub Phishing #infosec #Jira Abuse #PaaP #Platform_as_a_Proxy #SaaS Security #social engineering #SPF Bypass
Daily CyberSecurity
The "Seal of Approval" Trap: How Hackers are Hijacking GitHub and Jira Notifications
Cisco Talos exposes "Platform-as-a-Proxy" (PaaP). Hackers are abusing GitHub and Jira's trusted mail servers to bypass SPF/DKIM and deliver phishing lures.
38 views
Daily Writeups
⤷ Title: Referer-Based Access Control — The Last Access Control Lab Before I Move On to Authentication
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:19:22 GMT
════════════════════════
⌗ Tags: #hackerone #cybersecurity #bug_bounty #web_development
Medium
Referer-Based Access Control — The Last Access Control Lab Before I Move On to Authentication
13 labs deep. This is how the access control series ends — and what is coming next.
32 views
Daily Writeups
⤷ Title: Lab 12: Multi-Step Process With No Access Control on One Step — How I Promoted Myself to Admin
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 09:31:30 GMT
════════════════════════
⌗ Tags: #website #bug_bounty #cybersecurity #ethical_hacking
Medium
Lab 12: Multi-Step Process With No Access Control on One Step — How I Promoted Myself to Admin
A common mistake developers make is securing the first step of a process and forgetting the rest. Here is how that one oversight becomes a…
20 views
Daily Writeups
⤷ Title: How Good Are AI Agents at Finding Web Vulnerabilities (Part 2)
════════════════════════
𐀪 Author: Tuomo Makkonen
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:39:16 GMT
════════════════════════
⌗ Tags: #agentic_ai #artificial_intelligence #application_security #cybersecurity #ai
Medium
How Good Are AI Agents at Finding Web Vulnerabilities (Part 2)
We gave AI agents the source code and their detection rate tripled, but they still can’t chain vulnerabilities together, agree on severity…
20 views
Daily Writeups
⤷ Title: Trilab — Complete Domain Compromise via Kerberos and ADCS Misconfiguration
════════════════════════
𐀪 Author: GauthamV
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:44:21 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #red_teaming #hacking
Medium
Trilab — Complete Domain Compromise via Kerberos and ADCS Misconfiguration
Objective / Scope
17 views
Daily Writeups
⤷ Title: Stop Giving Away Your AI for Free: The Razorpay/OpenAI Shift
════════════════════════
𐀪 Author: Vijay kumar
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:36:19 GMT
════════════════════════
⌗ Tags: #ai #xcode #openai #hacking #razorpay
Medium
Stop Giving Away Your AI for Free: The Razorpay/OpenAI Shift
Let’s be honest: most “AI founders” over the last two years have just been running expensive charities. You spend a weekend hacking…
12 views
Daily Writeups
⤷ Title: Claude AI Just Had the Worst Year Ever
════════════════════════
𐀪 Author: Shaswata Tripathy
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:29:21 GMT
════════════════════════
⌗ Tags: #hacking #ai #claude
Medium
Claude AI Just Had the Worst Year Ever
From sandbox escapes to source code leaks, Anthropic’s golden child has been through it all. Grab some popcorn.
14 views
Daily Writeups
⤷ Title: Beyond the Basics: Why an Ethical Hacking Course in Delhi Must Include Web3 and Smart Contract…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 10:08:20 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #jobs #delhi #ethical_hacking
Medium
Beyond the Basics: Why an Ethical Hacking Course in Delhi Must Include Web3 and Smart Contract…
If you have researched an ethical hacking course in Delhi, you will notice that all institutes discuss the following topics: penetration…
16 views