Daily Writeups
@Daily_Writeups
3.89K subscribers
4 photos
135K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.89K subscribers
Daily Writeups
⤷ Title: This Is How I Could Have Reactivated Your Instagram Account Without Your Knowledge
════════════════════════
𐀪 Author: Shubham Bhamare
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:05:43 GMT
════════════════════════
⌗ Tags: #facebook_bug_bounty #cybersecurity #bug_bounty_tips #bug_bounty #infosec
Medium
This Is How I Could Have Reactivated Your Instagram Account Without Your Knowledge
In this write-up, I have shared the story of an Instagram bug where deactivated account could be silently reactivated without victim’s…
13 views
Daily Writeups
⤷ Title: Broken Access Control via Overprivileged Public API Key — How I Accessed 100+ User IDs, Search…
════════════════════════
𐀪 Author: Krithick
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:32:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #llm #web_application_security #ethical_hacking
Medium
Broken Access Control via Overprivileged Public API Key — How I Accessed 100+ User IDs, Search Queries, and Internal Metrics Without…
A public chatbot key that was never supposed to do this much — and a $150 goodwill reward that confirmed it.
13 views
Daily Writeups
⤷ Title: From .map File to Disclosure of Logs and Infrastructure of a Company
════════════════════════
𐀪 Author: D0NATEL00
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:01:14 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
From .map File to Disclosure of Logs and Infrastructure of a Company
Why You Should not Skip Analyzing .map files, And Don’t Submit Reports When You Have That Adrenaline Rush
11 views
Daily Writeups
⤷ Title: Broken Access Control in Password Reset Leading to Account Takeover
════════════════════════
𐀪 Author: OffroadMouse
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 02:32:13 GMT
════════════════════════
⌗ Tags: #web_security #vulnerability #bug_bounty #broken_access_control #cybersecurity
Medium
去露個營，帳號怎麼被盜了?
本文僅以提升資訊安全、教育與研究為目的，所有測試與描述皆以保護使用者與系統安全為優先。針對文中所揭露之漏洞，已由 HITCON ZeroDay 協助通報該組織。
12 views
Daily Writeups
⤷ Title: A Camping Trip… and My Orders Were Suddenly Exposed
════════════════════════
𐀪 Author: OffroadMouse
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:59:00 GMT
════════════════════════
⌗ Tags: #web_security #idor #cybersecurity #bug_bounty #vulnerability
Medium
去露個營，訂單怎麼被看光光了?
本文僅以提升資訊安全、教育與研究為目的，所有測試與描述皆以保護使用者與系統安全為優先。針對文中所揭露之漏洞，已由 HITCON ZeroDay 協助通報該組織。
13 views
Daily Writeups
⤷ Title: How Good Are AI Agents at Finding Web Vulnerabilities (Part 3)
════════════════════════
𐀪 Author: Tuomo Makkonen
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:44:27 GMT
════════════════════════
⌗ Tags: #ai_agent #cybersecurity #application_security #artificial_intelligence
Medium
How Good Are AI Agents at Finding Web Vulnerabilities (Part 3)
We gave two AI pentesting harnesses the same model, the same target, and the same vulnerabilities. They came back with very different…
15 views
Daily Writeups
⤷ Title: Ransomware Hit You？ Do These 5 Things Right Now.
════════════════════════
𐀪 Author: Ransomrestore
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:09:46 GMT
════════════════════════
⌗ Tags: #infosec #ransomware #hacking #cybersecurity #data_recovery
Medium
Ransomware Hit You？ Do These 5 Things Right Now.
Your screen just changed. There’s a message. Countdown timer. Bitcoin address. Files you can’t open.
14 views
Daily Writeups
⤷ Title: Part 6 — Real Attack Scenarios (Post-Lockdown Exploitation)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:59:18 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #hacking #api #android
Medium
🔥 Part 6 — Real Attack Scenarios (Post-Lockdown Exploitation)
After everything we’ve covered, one thing should be clear:
13 views
Daily Writeups
⤷ Title: WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws
════════════════════════
𐀪 Author: George Petropoulos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:09:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #android_development #technology #cybersecurity #hacking
Medium
WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws
Android Mobile Application Security Testing Write-Up
16 views
Daily Writeups
⤷ Title: ShellForge: Building a Constraint-Aware Shellcode Generator from Scratch
════════════════════════
𐀪 Author: Oderinde Toluwanimi
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:07:28 GMT
════════════════════════
⌗ Tags: #exploit_development #penetration_testing #programming #cybersecurity #hacking
Medium
ShellForge: Building a Constraint-Aware Shellcode Generator from Scratch
How I built a multi-architecture shellcode synthesiser in C that outperforms msfvenom on bad-char avoidance — and what I learned about…
13 views
Daily Writeups
⤷ Title: URL Anatomy & Encoding: Why Your Payloads Break
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:08:58 GMT
════════════════════════
⌗ Tags: #web_development #penetration_testing #ethical_hacking #cybersecurity #web_security
Medium
URL Anatomy & Encoding: Why Your Payloads Break
Your payload was correct. It just never arrived at the server that way.
13 views
Daily Writeups
⤷ Title: Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
════════════════════════
𐀪 Author: Panggil Aku Paman
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:33:09 GMT
════════════════════════
⌗ Tags: #steganography #ethical_hacking #red_team #data_exfiltration #blue_team
Medium
Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
Ada satu jenis alert yang jarang membuat SOC panik. Bukan malware, bukan credential theft, bukan exploit aktif. Hanya file gambar, tidak…
13 views
Daily Writeups
⤷ Title: Mapping Cyber Attacks to the OSI Layers
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:26:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #network_security #osi_model #networking
Medium
Mapping Cyber Attacks to the OSI Layers
Cyber-attacks do not happen randomly. Every attack targets a specific function in how systems communicate.
13 views
Daily Writeups
⤷ Title: AI System Reconnaissance — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Rotimi Ishola
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:38:52 GMT
════════════════════════
⌗ Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
Medium
AI System Reconnaissance — TryHackMe Walkthrough
29.04.2026
13 views
Daily Writeups
⤷ Title: Salesforce Security Isn’t Enough: Why Your Integration Layer Matters More
════════════════════════
𐀪 Author: Prevoyance IT Solutions
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:01:07 GMT
════════════════════════
⌗ Tags: #enterprise_architecture #cybersecurity #api_security #apigee #salesforce
Medium
Salesforce Security Isn’t Enough: Why Your Integration Layer Matters More
I’ve noticed something interesting in conversations with teams working on Salesforce security.
28 views
Daily Writeups
⤷ Title: Membedah Celah Keamanan SQL Injection pada Form Login dan Panduan Mitigasiny
════════════════════════
𐀪 Author: Reginald Petrus Silaban
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:31:07 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Membedah Celah Keamanan SQL Injection pada Form Login dan Panduan Mitigasiny
Pendahuluan
37 views
Daily Writeups
⤷ Title: CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:16:00 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:33:45 +0000
════════════════════════
⌗ Tags: #Technology #Artificial Intelligence #AI #Cybersecurity #data breach #SaaS #Vulnerability
Hackread
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the right TPRM solution fast.
31 views
Daily Writeups
⤷ Title: Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:41:37 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API Fuzzing #Bond Protocol #cybersecurity research #malware analysis #MAPS Cloud Scanner #Microsoft Active Protection Service #reverse engineering #SHA_256 Lookup #threat intelligence #Windows Defender
Penetration Testing Tools
Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner
Interact directly with Microsoft’s MAPS backend. Use this research tool to analyze file reputations, reverse the Bond protocol, and fuzz Defender's cloud API.
20 views
Daily Writeups
⤷ Title: Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:35:39 +0000
════════════════════════
⌗ Tags: #Data Leak #Checkmarx #CVE_2026_33634 #data leak #GitHub Breach #KICS #LAPSUS$ #Mandiant #Open VSX #supply chain attack #TeamPCP #Trivy #VS Code extensions
Penetration Testing Tools
Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private
13 views
Daily Writeups
⤷ Title: The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:34:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser extension malware #Credential Harvesting #Cyber Security 2026 #Email Bombing #Google Threat Intelligence #Mandiant #Microsoft Teams phishing #SnowBasin #SnowBelt #SnowGlaze #Social Engineering #UNC6692
Penetration Testing Tools
The "Snow" Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the assailants
8 views