Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: ⚙️ 11. — Method-based Access Control Can Be Circumvented
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:51:01 GMT
════════════════════════
⌗ Tags: #web_security #portswigger #cybersecurity #bug_bounty
Medium
⚙️ 11. — Method-based Access Control Can Be Circumvented
Difficulty: 🟡 Practitioner
17 views
Daily Writeups
⤷ Title: ⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:39:02 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #cybersecurity #web_security
Medium
⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
Difficulty: 🟡 Practitioner
12 views
Daily Writeups
⤷ Title: Tokenomics Exploits: When Design Becomes an Attack Vector
════════════════════════
𐀪 Author: Abraham
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:14:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #smart_contract_security #bug_bounty #smart_contracts #blockchain
Medium
Tokenomics Exploits: When Design Becomes an Attack Vector
Why the most dangerous crypto vulnerabilities aren’t in the code they’re in the incentives
14 views
Daily Writeups
⤷ Title: Never thought I’d hack it. How I found two XSS on a daily used web app?
════════════════════════
𐀪 Author: O iluminado_x86
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:55:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #bug_bounty_tips #xss_attack
Medium
Never thought I’d hack it. How I found two XSS on a daily used web app?
I use this site almost every day. Never thought I’d hack it.
10 views
Daily Writeups
⤷ Title: Beginner Mistakes in Recon — And How Professionals Avoid Them
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:02:55 GMT
════════════════════════
⌗ Tags: #passive_reconnaissance #active_reconnaissance #reconnaissance #recon_mistakes #bug_bounty
Medium
Beginner Mistakes in Recon — And How Professionals Avoid Them
Reconnaissance is the foundation of bug hunting. Yet most beginners make their biggest mistakes at exactly this stage — which is why they…
14 views
Daily Writeups
⤷ Title: How to Run a Real-World Phishing Simulation (End-to-End Guide)-Part-1
════════════════════════
𐀪 Author: Kislay Kumar
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:43:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #bug_bounty
Medium
How to Run a Real-World Phishing Simulation (End-to-End Guide)-Part-1
Phishing simulations, when done correctly and ethically, are one of the most effective ways to measure and improve an organization’s…
12 views
Daily Writeups
⤷ Title: PortSwigger: DOM-based vulnerabilities Labs
════════════════════════
𐀪 Author: Abdelhamid Elbouz
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:52:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #portswigger #dom_based_xss #hacking
Medium
PortSwigger: DOM-based vulnerabilities Labs
Lab: DOM XSS using web messages
18 views
Daily Writeups
⤷ Title: The Hidden Art of Speedrunning Reality: Where Glitches Become Skill
════════════════════════
𐀪 Author: Franziska "Ziska" Fink
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:01:06 GMT
════════════════════════
⌗ Tags: #speedrunning #cybersecurity #hacking #reverse_engineering #gaming_culture
Medium
The Hidden Art of Speedrunning Reality: Where Glitches Become Skill
Speedrunners do not play games the way they were designed.
13 views
Daily Writeups
⤷ Title: Will Quantum Computers Really Break Bitcoin and Solana Wallets?
════════════════════════
𐀪 Author: Blockchain_Privacy
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:55:45 GMT
════════════════════════
⌗ Tags: #quantum_computing #crypto #hacking #cryptocurrency #finance
Medium
Will Quantum Computers Really Break Bitcoin and Solana Wallets?
Every few months, the same headline comes around again.
11 views
Daily Writeups
⤷ Title: Claude Mythos: The Most Dangerous AI Ever Created?
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:04:02 GMT
════════════════════════
⌗ Tags: #anthropic_claude #ai_security #cybersecurity #hacking
Medium
Claude Mythos: The Most Dangerous AI Ever Created?
What if the next cyber weapon isn’t malware… but an AI model?
10 views
Daily Writeups
⤷ Title: Your Network Can Be Hacked From a Phone. Here’s How.
════════════════════════
𐀪 Author: Defense Stack
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:03:04 GMT
════════════════════════
⌗ Tags: #hacking #kali_linux #mobile #cyber_security_awareness #cybersecurity
Medium
Your Network Can Be Hacked From a Phone. Here’s How.
There was a time in history where serious penetration testing required a heavy backpack, packed with cables, external dongles and a laptop…
11 views
Daily Writeups
⤷ Title: CISCO notes Module 6 — Network Media
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:06:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #ethical_hacking #information_security #web_development
Medium
CISCO notes Module 6 — Network Media
Three Media Types
Data is transmitted across a network on media. The media provides the channel over which he message travels from source…
21 views
Daily Writeups
⤷ Title: Cisco Notes Networking basics — Module 5:Communication principles.
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:05:30 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ethical_hacking #web_development #information_security
Medium
Cisco Notes Networking basics — Module 5:Communication principles.
Communication Protocols — Communication in our daily lives takes many forms and occur in many environments. These rules, or protocols, must…
38 views
Daily Writeups
⤷ Title: Kerberos Roasting in Active Directory
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:24:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #zeroday_security_services #kerberoasting #information_security #ethical_hacking
Medium
Kerberos Roasting in Active Directory
Practical Demonstration of Service Account Exposure & Offline Credential Analysis
51 views
Daily Writeups
⤷ Title: Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 16:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: New ZionSiphon Malware Discovered Targeting Israeli Water Systems
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 11:00:56 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #Iran #Israel #OT #Palestine #Water #ZionSiphon
Hackread
New ZionSiphon Malware Discovered Targeting Israeli Water Systems
Researchers spot ZionSiphon malware targeting Israeli water systems, focusing on ICS protocols and plant configurations to enable real-world disruption.
38 views
Daily Writeups
⤷ Title: Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 12:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #cybersecurity #Froxlor #infosec #Open Source Security #Path Traversal #PHP Security #rce #Server Management #vulnerability management #Web Shell
Daily CyberSecurity
Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors
Froxlor faces two critical flaws, including a CVSS 10. Learn how path traversal and config injection allow persistent RCE. Patch your server management today!
21 views
Daily Writeups
⤷ Title: Critical Command Injection Flaw Hits upKeeper Instant Privilege Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 12:03:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Rights #Argument Injection #CVE_2026_2449 #CWE_88 #infosec #LocalSystem #Patch Alert #privilege escalation #upKeeper #Windows Security
Daily CyberSecurity
Critical Command Injection Flaw Hits upKeeper Instant Privilege Access
Critical 9.1 flaw in upKeeper Instant Privilege allows standard users to gain LocalSystem rights via command injection. Patch to v1.6.0.4576 immediately.
19 views
Daily Writeups
⤷ Title: ⚙️ 13. — Referer — Based Access Control
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 11:11:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #portswigger #web_security #cybersecurity
Medium
⚙️ 13. — Referer — Based Access Control
Difficulty: 🟡 Practitioner
12 views
Daily Writeups
⤷ Title: ⚙️ 12. — Multi-step process with no access control on one step
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #bug_bounty #portswigger
Medium
⚙️ 12. — Multi-step process with no access control on one step
Difficulty: 🟡 Practitioner
23 views
Daily Writeups
⤷ Title: I hacked deeper into a network without moving — here’s how SSH pivoting works
════════════════════════
𐀪 Author: Saswata Mohapatra || Ringo
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 12:22:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #networking #penetration_testing #infosec
Medium
I hacked deeper into a network without moving — here’s how SSH pivoting works
Last week, I was staring at a machine I couldn’t reach. The firewall was blocking me. Every tool timed out. Then I remembered — I didn’t…
13 views