Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: TikTok’s Secret Tracker: The “Featured” Extensions Harvesting Your Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:15:42 +0000
════════════════════════
⌗ Tags: #Data Leak #Browser Extensions #chrome #cybersecurity #Data Privacy #Fingerprinting #infosec #LayerX #Malicious Extensions #malware #microsoft edge #TikTok #TikTok Downloader
Daily CyberSecurity
TikTok’s Secret Tracker: The "Featured" Extensions Harvesting Your Data
LayerX unmasks 12 TikTok downloader extensions tracking 130,000+ users. Even "Featured" tools can be traps. Learn how this resilient malware ecosystem works.
10 views
Daily Writeups
⤷ Title: Uncovering the Hidden Attack Surface of Salesforce instances
════════════════════════
𐀪 Author: Mustafa Mohamed (d3sca)
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:32:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #security #cybersecurity #bug_bounty_tips
Medium
Uncovering the Hidden Attack Surface of Salesforce instances
Introduction
9 views
Daily Writeups
⤷ Title: Bug Chaining — The Skill That Turns Low Bugs Into Critical
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:52:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #vulnerability #bug_bounty #security
Medium
🔗 Bug Chaining — The Skill That Turns Low Bugs Into Critical
✍️ Introduction
12 views
Daily Writeups
⤷ Title: Authentication Evolution & Bypass: Real Examples (Web, API, Mobile, Cloud)
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:50:04 GMT
════════════════════════
⌗ Tags: #hacking_articles #authentication_bypass #bug_bounty #advanced_authentication #cybersecurity
Medium
Authentication Evolution & Bypass: Real Examples (Web, API, Mobile, Cloud)
Introduction
15 views
Daily Writeups
⤷ Title: How Attackers Use Scheduled Tasks for Persistence (Windows)
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:42:25 GMT
════════════════════════
⌗ Tags: #programming #hacking #ai #bug_bounty #windows
Medium
How Attackers Use Scheduled Tasks for Persistence (Windows)
MITRE ATT&CK: T1053.005 | Persistence | SOC-Focused
13 views
Daily Writeups
⤷ Title: OSCP Certification Training in Bangalore | Securium Academy
════════════════════════
𐀪 Author: Securium Academy
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:38:36 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #hacking #cybercrime #cybersecurity
Medium
OSCP Certification Training in Bangalore | Securium Academy
If you are searching for OSCP Certification Training in Bangalore, you are likely serious about building a career in ethical hacking…
15 views
Daily Writeups
⤷ Title: Module 1 | Foundations of Cybersecurity | Google Professional Cybersecurity Certificate
════════════════════════
𐀪 Author: Aruldeshwal
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:20:08 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #cybersecurity_analyst #information_security #cybersecurity #infosec
Medium
Module 1 | Foundations of Cybersecurity | Google
Module 1: Welcome to the exciting world of cybersecurity.
19 views
Daily Writeups
⤷ Title: How to Create an AWS Free Tier Account Without a Credit/Debit Card (2026 Guide)
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:12:48 GMT
════════════════════════
⌗ Tags: #cloud_computing #cybersecurity #ethical_hacking #penetration_testing #cloud_security
Medium
How to Create an AWS Free Tier Account Without a Credit/Debit Card (2026 Guide)
Creating an Amazon Web Services (AWS) account is often the first step for developers, students, and startups who want to explore cloud…
19 views
Daily Writeups
⤷ Title: Spent the last few hours tearing apart a vulnerable banking app vulnbank.org Here’s what I found:
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:13:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing #jwt #cybersecurity_bug_bounty
Medium
Spent the last few hours tearing apart a vulnerable banking app vulnbank.org Here’s what I found:
The IDOR
33 views
Daily Writeups
⤷ Title: Supply Chain Attack Vectors | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:58:38 GMT
════════════════════════
⌗ Tags: #tryhackme #supply_chain_attack #cybersecurity #ai
Medium
Supply Chain Attack Vectors | TryHackMe
Learn how trusted ML components can be turned into attack vectors
39 views
Daily Writeups
⤷ Title: Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 16:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Toxic Combinations: When Cross-App Permissions Stack into Risk
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 16:11:36 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:33:28 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #313 Team #Bluesky #Cyber Attack #Cyber Crime #Cybersecurity #DDOS #Iran
Hackread
Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported.
28 views
Daily Writeups
⤷ Title: GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4922 #CVE_2026_5816 #DevSecOps #gitlab #GraphQL API #infosec #Patch Alert #security update #Session Hijacking #Web IDE
Daily CyberSecurity
GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
GitLab fixes high-severity GraphQL CSRF and Web IDE vulnerabilities in versions 18.11.1, 18.10.4, and 18.9.6. Protect your sessions and projects—patch now!
19 views
Daily Writeups
⤷ Title: CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:05:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40342 #CVSS 10.0 #CWE_22 #database security #Firebird #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution #sql injection
Daily CyberSecurity
CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
Critical 10.0 CVSS flaw in Firebird Database allows RCE via path traversal in the engine loader. Attackers gain root/SYSTEM privileges. Patch to 5.0.4+ now.
15 views
Daily Writeups
⤷ Title: Bug Bounty $$$ Write-up: OTP Bypass
════════════════════════
𐀪 Author: secureITmania
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:37:14 GMT
════════════════════════
⌗ Tags: #software_development #ethical_hacking #cybersecurity #bug_bounty #information_security
Medium
Bug Bounty $$$ Write-up: OTP Bypass
How an Eagle-Eyed Observation Led to a Critical Account Takeover
15 views
Daily Writeups
⤷ Title: Broken Access Control Leads to Unauthorized Account Deletion via API
════════════════════════
𐀪 Author: Seafeldeenwael
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:18:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #broken_access_control #bug_bounty #cyber_security_awareness
Medium
Broken Access Control Leads to Unauthorized Account Deletion via API
This write-up covers my very first bug hunting experience on HackerOne. To be honest, I was initially quite intimidated by the fierce…
16 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:56:25 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
15 views
Daily Writeups
⤷ Title: So You Want to Break an AI? A Casual Guide to Testing AI & Its Weirdest Vulnerabilities
════════════════════════
𐀪 Author: rozzen
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:40:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #bug_bounty
Medium
So You Want to Break an AI? A Casual Guide to Testing AI & Its Weirdest Vulnerabilities
Imagine you just built a super smart robot babysitter. It can watch kids, answer questions, and even order pizza. Cool, right?
13 views
Daily Writeups
⤷ Title: “Vercel Hack Exposed: How a Simple AI Tool Led to a $2M Data Breach”
════════════════════════
𐀪 Author: Mohd Azhar
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:34:36 GMT
════════════════════════
⌗ Tags: #data_breach #hacking #vercel #artificial_intelligence
Medium
“Vercel Hack Exposed: How a Simple AI Tool Led to a $2M Data Breach”
Subtitle: Inside Vercel’s 22-month supply chain breach — and why the next frontier of cybersecurity isn’t firewalls, it’s the invisible…
14 views
Daily Writeups
⤷ Title: The Arbitrum Situation
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:11:23 GMT
════════════════════════
⌗ Tags: #technology_news #arbitrum #hacking #decentralised_finance #decentralized_exchange
Medium
The Arbitrum Situation
When Your “Decentralized” Pause Button Actually Works
15 views