Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Reflected XSS Context
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 10:26:35 GMT
════════════════════════
⌗ Tags: #css #reflected_xss #xss_attack #xss_vulnerability #xs
Medium
Reflected XSS Context
XSS between HTML tags
34 views
Daily Writeups
⤷ Title: ⚙️ 03. — Forced OAuth profile linking
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:26:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #portswigger #web_security
Medium
⚙️ 03. — Forced OAuth profile linking
Difficulty: 🟡 Practitioner
31 views
Daily Writeups
⤷ Title: How Attackers Use Legit Tools Like PowerShell & RDP to Stay Invisible (Living Off The Land Attacks)
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:13:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #python #hacking #powershell
Medium
How Attackers Use Legit Tools Like PowerShell & RDP to Stay Invisible (Living Off The Land Attacks)
No malware. No exploit. Just PowerShell and RDP — and still a full compromise.
28 views
Daily Writeups
⤷ Title: ⚙️ 02. — SSRF via OpenID dynamic client registration
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:11:01 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #portswigger #cybersecurity
Medium
⚙️ 02. — SSRF via OpenID dynamic client registration
Difficulty: 🟡 Practitioner
14 views
Daily Writeups
⤷ Title: ⚙️ 01. — Authentication bypass via OAuth implicit flow
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:56:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #portswigger #bug_bounty
Medium
⚙️ 01. — Authentication bypass via OAuth implicit flow
Difficulty: 🟢 Apprentice
29 views
Daily Writeups
⤷ Title: OAuth 2.0 Authetication Vulnerabilities
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:46:01 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #web_security #cybersecurity
Medium
🪪 OAuth 2.0 Authetication Vulnerabilities
🎯 What is OAuth? {#what-is-oauth}
16 views
Daily Writeups
⤷ Title: Hidden Entry Points: robots.txt + .well-known URIs in Web Recon
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:27:08 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #bug_bounty #cybersecurity #osint
Medium
Hidden Entry Points: robots.txt + .well-known URIs in Web Recon
When performing web reconnaissance, some of the most valuable insights don’t come from scanning tools — they come from standardized files…
10 views
Daily Writeups
⤷ Title: I Wanted Masscan Speed With Nmap Stealth — So I Built ZeroMap
════════════════════════
𐀪 Author: Prince Patel aka Z3R0
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:56:45 GMT
════════════════════════
⌗ Tags: #hacking #offensive_security #port_scanner #red_team #cybersecurity
Medium
I Wanted Masscan Speed With Nmap Stealth — So I Built ZeroMap
Back when I was starting my journey in ethical hacking, the first tool I played with was “Nmap”. Which is a well-known Network Mapping…
16 views
Daily Writeups
⤷ Title: Phishing
════════════════════════
𐀪 Author: Omarani
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:46:32 GMT
════════════════════════
⌗ Tags: #email_marketing #cyberattack #operating_systems #hacking #cybersecurity
Medium
Phishing 🐟🪝
Phishing is the most common attack to gaining unauthorized access. It targets individuals and organizations instead of the security…
10 views
Daily Writeups
⤷ Title: Hackear a Inteligência Artificial e os Riscos
════════════════════════
𐀪 Author: BombasticBurgh
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:16:43 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #risk_management #ai #hacking #cybersecurity
Medium
Hackear a Inteligência Artificial e os Riscos
As tecnologias de inteligência artificial (IA) e aprendizado de máquina (ML) estão cada vez mais integradas a diversos setores, oferecendo…
17 views
Daily Writeups
⤷ Title: LLMGoat: Offensive LLM Security Environment
════════════════════════
𐀪 Author: Liteshghute
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 10:59:47 GMT
════════════════════════
⌗ Tags: #ai_security #infosec #llm_security #llmgoat #owasp_llm_top_10
Medium
LLMGoat: Offensive LLM Security Environment
A hands-on, locally hosted exploitation environment covering the OWASP LLM Top 10, no cloud API keys, no cost, just your machine and a…
16 views
Daily Writeups
⤷ Title: Poster — TryHackMe WalkThrough
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:07:36 GMT
════════════════════════
⌗ Tags: #red_team #ctf #tryhackme_walkthrough #tryhackme_writeup #penetration_testing
Medium
Poster — TryHackMe WalkThrough
Date: 14/04/2026
14 views
Daily Writeups
⤷ Title: Search Engine Discovery & Google Dorking: Turning Google into a Recon Weapon
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:31:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #osint #penetration_testing #google_dorking
Medium
Search Engine Discovery & Google Dorking: Turning Google into a Recon Weapon
Search engines are not just for finding information — they are one of the most powerful OSINT (Open Source Intelligence) tools available.
24 views
Daily Writeups
⤷ Title: ContAInment: AI Security TryHackMe
════════════════════════
𐀪 Author: Shubham Kumar
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:55:29 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #ai_security #prompt_injection_attack #tryhackme_writeup
Medium
ContAInment: AI Security TryHackMe
Can you help contain the ransomware threat with the help of AI?
33 views
Daily Writeups
⤷ Title: TryHackMe | Prompt Injection | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 12:20:26 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #cybersecurity #tryhackme_walkthrough #ai #tryhackme
Medium
TryHackMe | Prompt Injection | WriteUp
Continue your AI security journey by learning about prompt injection.
44 views
Daily Writeups
⤷ Title: Level Up Your Cybersecurity Career in 2026 — Limited Time Offer!
════════════════════════
𐀪 Author: Adilbaignyc
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 11:43:25 GMT
════════════════════════
⌗ Tags: #career_growth #cybersecurity #firewall_security #networking #ethical_hacking
Medium
Level Up Your Cybersecurity Career in 2026 — Limited Time Offer!
Are you ready to become a Palo Alto Certified Network Security Administrator (PCNSA) and stand out in the cybersecurity industry? 🔐
68 views
Daily Writeups
⤷ Title: North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 14:28:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #ClickFix #Crypto theft #cybersecurity #Deepfakes #Fake Meetings #infosec #Lazarus Group #macOS security #North Korea #social engineering #UNC1069 #Web3 #Windows Defender
Daily CyberSecurity
North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
North Korea's UNC1069 uses fake video calls and "ClickFix" prompts to drain crypto assets and record victims for deepfakes. Audit your meetings now!
46 views
Daily Writeups
⤷ Title: Web Security Series #15 — Exploiting Command Injection for Reverse Shell
════════════════════════
𐀪 Author: Laibakashif
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 14:31:55 GMT
════════════════════════
⌗ Tags: #web_application_testing #command_injection #cybersecurity #ethical_hacking #bug_bounty
Medium
Web Security Series #15 — Exploiting Command Injection for Reverse Shell
Introduction
27 views
Daily Writeups
⤷ Title: How I Found an Unauthenticated POST Endpoint in a Production API -A Real Bug Bounty Story
════════════════════════
𐀪 Author: Md Zishan Firoz
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 13:52:14 GMT
════════════════════════
⌗ Tags: #hacking #ethical_hacking #bug_bounty #cybersecurity #bug_hunting
Medium
🔐 How I Found an Unauthenticated POST Endpoint in a Production API -A Real Bug Bounty Story
From Swagger recon to a critical BFLA vulnerability
22 views
Daily Writeups
⤷ Title: Sourcing Hack with Cursor: ATS Reverse-Engineering for Scalable Candidate Discovery
════════════════════════
𐀪 Author: Diane Rocher
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 13:39:54 GMT
════════════════════════
⌗ Tags: #hiring #recruiting #hacking #vibe_coding #llm
Medium
Sourcing Hack with Cursor: ATS Reverse-Engineering for Scalable Candidate Discovery
Page Discovery Experiment That Became a Talent Intelligence Pipeline
18 views
Daily Writeups
⤷ Title: Professional Kali Linux (2026.1+) Post-Installation Setup with Bash
════════════════════════
𐀪 Author: fsocietyhub
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 13:31:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #kali_linux #cybersecurity #infosec #hacking
Medium
Professional Kali Linux (2026.1+) Post-Installation Setup with Bash
Automate your environment build, organize your workspace, and get straight to hacking.
14 views