Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
════════════════════════
𐀪 Author: CANITEY
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:32:10 GMT
════════════════════════
⌗ Tags: #csrf #xss_attack #bugbounty_writeup #account_takeover_attacks #bug_bounty
Medium
Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
Hey everyone, it’s been a while — Canitey here again.
10 views
Daily Writeups
⤷ Title: Finding an IDOR in Tesla From the Outside
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:59:27 GMT
════════════════════════
⌗ Tags: #hacking #software_development #tesla #bugcrowd #bug_bounty
Medium
Finding an IDOR in Tesla From the Outside
When you’re testing applications, you’ll eventually hit a wall — a point where the intended user flow just isn’t accessible.
15 views
Daily Writeups
⤷ Title: Encoding Bypasses | Complete Guide
════════════════════════
𐀪 Author: Amrsmooke
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:12:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #bug_bounty #encoding
Medium
Encoding Bypasses | Complete Guide
Common Encoding Types in Security
12 views
Daily Writeups
⤷ Title: Threat Modeling AI Systems: A Complete Playbook for Practitioners
════════════════════════
𐀪 Author: Brett Crawley
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:00:55 GMT
════════════════════════
⌗ Tags: #ai_agent #ai_security #application_security #llm #threat_modeling
Medium
Threat Modeling AI Systems: A Complete Playbook for Practitioners
The Blast Radius — Edition [4]
8 views
Daily Writeups
⤷ Title: How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
════════════════════════
𐀪 Author: Sukansh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:10:49 GMT
════════════════════════
⌗ Tags: #infosec #programming #cybersecurity #ethical_hacking #malware_analysis
Medium
How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
A step-by-step walkthrough of simulating the EternalBlue exploit chain, observing file encryption behavior, and building detection rules…
10 views
Daily Writeups
⤷ Title: Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:26:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #kerberoasting #kerberos #penetration_testing
Medium
Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
And why “we ran the wordlist and got nothing” is the most dangerous sentence in a pentest debrief.
7 views
Daily Writeups
⤷ Title: Masquerade CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:47:02 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #tryhackme_writeup #tryhackme #tryhackme_walkthrough #ctf_writeup
Medium
Masquerade CTF Notes | TryHackMe
Analyze malware traffic, decrypt payloads, and uncover attacker commands.
5 views
Daily Writeups
⤷ Title: The Dorking Manifesto: Uncovering the Hidden Web
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:47:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #open_source #google_dorking #cybersecurity
Medium
The Dorking Manifesto: Uncovering the Hidden Web
“The internet forgets nothing. It only hides things badly.”
11 views
Daily Writeups
⤷ Title: Cyber Security: The First Line of Defense in a Connected World
════════════════════════
𐀪 Author: Arti Sandip Jadhav
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:39:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #online_safety #cybersecurity #data_security #technolo
Medium
🔐 Cyber Security: The First Line of Defense in a Connected World
Cybersecurity Is Now More Important Than Ever Before!
18 views
Daily Writeups
⤷ Title: Part 2 : Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:14:58 GMT
════════════════════════
⌗ Tags: #xss_attack #web_attack #xss_vulnerability #xss_bypass
Medium
Part 2 : Cross-Site Scripting (XSS)
Real-World Web Attacks Explained
27 views
Daily Writeups
⤷ Title: Part 1 : SQL Injection Attacks
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:15:49 GMT
════════════════════════
⌗ Tags: #sql_server #web_attack #sql #sql_injection
Medium
Part 1 : SQL Injection Attacks
Real-World Web Attacks Explained
39 views
Daily Writeups
⤷ Title: Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 16:22:03 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Cyber Attack #Cybersecurity #data breach #Polymarket #Vulnerability #Xorcat
Hackread
Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
A hacker using the alias "Xorcat" claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident.
31 views
Daily Writeups
⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
26 views
Daily Writeups
⤷ Title: When AI Coding Assistants Become Attack Vectors: Cursor Vulnerability Raises Developer Security…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:00:54 GMT
════════════════════════
⌗ Tags: #application_security #ai_coding #devsecops #cybersecurity #ai
Medium
When AI Coding Assistants Become Attack Vectors: Cursor Vulnerability Raises Developer Security…
The rapid adoption of AI powered coding assistants is transforming software development, but it is also introducing new security risks. A…
15 views
Daily Writeups
⤷ Title: Most Hacked Businesses Do the Wrong Things First
════════════════════════
𐀪 Author: Jusjaesho
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:40:17 GMT
════════════════════════
⌗ Tags: #incident_response #hacking #data_breach #small_business #cybersecurity
Medium
Most Hacked Businesses Do the Wrong Things First
The instinct is to panic. That’s understandable. What’s less understandable is that most of the advice circulating about what to do after a…
19 views
Daily Writeups
⤷ Title: entry 003 · SOC journey
════════════════════════
𐀪 Author: Naana Sarkodie
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:33:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #cyber_security_awareness #infosec #data_privacy
Medium
entry 003 · SOC journey
Controls, categories and the data we are all protecting
13 views
Daily Writeups
⤷ Title: HTB Series — Facts (Easy Box)
════════════════════════
𐀪 Author: ScriptDieYou
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 16:18:46 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #penetration_testing
Medium
HTB Series — Facts (Easy Box)
TLDR; Bypassed a User-Agent allowlist to reach a Camaleon CMS 2.9.0 instance, escalated to admin via a mass-assignment bug, looted AWS S3…
12 views
Daily Writeups
⤷ Title: Checkpoint room THM
════════════════════════
𐀪 Author: Napulitanka
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:40:53 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup
Medium
Checkpoint room THM
Hey everyone reading this writeup!
21 views
Daily Writeups
⤷ Title: Website Anda Bisa Diretas dalam Hitungan Menit: Ini Penyebabnya!
════════════════════════
𐀪 Author: Diva
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:17:39 GMT
════════════════════════
⌗ Tags: #sql_injection #xs #keamanan_web
Medium
Website Anda Bisa Diretas dalam Hitungan Menit: Ini Penyebabnya!
Bayangkan ini: Anda baru saja selesai menyusun laporan keuangan bulanan, meninggalkan laptop sebentar untuk mengambil kopi. Dua menit…
29 views
Daily Writeups
⤷ Title: SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 21:56:00 +0530
════════════════════════
⌗ Tags: No_Tags
23 views
Daily Writeups
⤷ Title: New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 20:13:00 +0530
════════════════════════
⌗ Tags: No_Tags
23 views