Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: لا تبداء
════════════════════════
𐀪 Author: Firstbugpath
════════════════════════
ⴵ Time: Fri, 22 May 2026 22:33:23 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #arabic #hackerone_report #bug_bounty
Medium
لا تبداء
أغرب حاجة في مجال الباونتي إنك ممكن تتعلم 6 شهور
27 views
Daily Writeups
⤷ Title: From Org Takeover to Pre-Auth Org Takeover: The Bypass
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:14:01 GMT
════════════════════════
⌗ Tags: #idor #authentication_bypass #csrf_bypass #bug_bounty #web_security
Medium
From Org Takeover to Pre-Auth Org Takeover: The Bypass
After my previous IDOR report team pushed the fix and closed report as resolved. Always after the fix is pushed for my reported issues, I…
27 views
Daily Writeups
⤷ Title: Galaxy Dash: Accessing Other Users’ Deliveries via IDOR
════════════════════════
𐀪 Author: Dennis Sev7n
════════════════════════
ⴵ Time: Fri, 22 May 2026 22:32:30 GMT
════════════════════════
⌗ Tags: #web_app_security #application_security #web_penetration_testing
Medium
Galaxy Dash: Accessing Other Users’ Deliveries via IDOR
Platform: BugForge
Category: Insecure Direct Object Reference (IDOR)
28 views
Daily Writeups
⤷ Title: Understanding Nmap at Packet Level — What I Actually Saw in Wireshark
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 22 May 2026 22:30:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #networking #ethical_hacking #nmap #cybersecurity
Medium
Understanding Nmap at Packet Level — What I Actually Saw in Wireshark
I ran Nmap scans and captured everything in Wireshark simultaneously. Here’s exactly what I discovered at byte level — not theory, real…
18 views
Daily Writeups
⤷ Title: Recruit TryHackMe walkthrough
════════════════════════
𐀪 Author: Crystalcascade14
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:10:59 GMT
════════════════════════
⌗ Tags: #lfi #cybersecurity #tryhackme_walkthrough #tryhackme #sql
Medium
Recruit TryHackMe walkthrough
Medium-level challenge that required knowledge of SQL Injection, Basic LFI (Local File Inclusion), Web enumeration (gobuster)…
22 views
Daily Writeups
⤷ Title: The Backend Engineer’s Guide to Broken Object Level Authorization
════════════════════════
𐀪 Author: Hafiq Iqmal
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:01:00 GMT
════════════════════════
⌗ Tags: #api_security #fastapi #laravel #backend #security
Medium
The Backend Engineer’s Guide to Broken Object Level Authorization
BOLA is OWASP’s number one API risk. Your authentication middleware does not stop it. Here is the code pattern that does.
27 views
Daily Writeups
⤷ Title: Is SQLI still exist in the wild ? 2 SQLI 0 $
════════════════════════
𐀪 Author: Ahmedsameh
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:41:27 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty #blind_sql_injection #sql_injection #information_security
Medium
Is SQLI still exist in the wild ? 2 SQLI 0 $
Two real SQLi vulnerabilities found during bug hunting — both out of scope, both reported anyway
21 views
Daily Writeups
⤷ Title: 3 Brain-Dead Bugs Making Me Thousands in 2026
════════════════════════
𐀪 Author: AI Red Team
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:23:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips
Medium
3 Brain-Dead Bugs Making Me Thousands in 2026
How to Find Low hanging fruits
26 views
Daily Writeups
⤷ Title: You’re Approaching a Cybersecurity Career the Wrong Way — Here’s What Actually Works
════════════════════════
𐀪 Author: networkdavit
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:32:43 GMT
════════════════════════
⌗ Tags: #careers #infosec #career_advice #cybersecurity #cybersecurity_training
Medium
You’re Approaching a Cybersecurity Career the Wrong Way — Here’s What Actually Works
If you’re trying to break into cybersecurity by collecting certifications, binge-watching hacking tutorials, and applying to 200 jobs with…
17 views
Daily Writeups
⤷ Title: Guided Pentest: Web [TryHackMe]
════════════════════════
𐀪 Author: Amr Sebie
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:07:05 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #guided_pentestweb #ctf_writeup #tryhackme
Medium
Guided Pentest: Web [TryHackMe]
Lab link: https://tryhackme.com/room/guidedpentestweb
16 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
════════════════════════
𐀪 Author: Azhar Aufa
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:20:57 GMT
════════════════════════
⌗ Tags: #web_security_academy #sql_injection #portswigger_lab
Medium
PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
Di lab ini, tujuannya sederhana: menemukan password administrator untuk login di My Account dengan celah SQL Injection menggunakan teknik…
25 views
Daily Writeups
⤷ Title: WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:39:29 +0000
════════════════════════
⌗ Tags: #Malware #brute force attack #Cyber Security #EDR evasion #File Share Encryption #infosec #network_security #No Local Execution #Remote Ransomware #SMB Exploitation #Sophos Counter Threat Unit #WantToCry
Daily CyberSecurity
WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
Sophos exposes WantToCry, a remote ransomware campaign that avoids EDR by using brute-forced SMB shares to read, encrypt, and rewrite files from afar.
25 views
Daily Writeups
⤷ Title: Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:03:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #sql_injection #ai_assisted #google_gemma
Medium
Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
AI-assisted SQL Injection testing against a deliberately vulnerable e-commerce application.
22 views
Daily Writeups
⤷ Title: Stop Googling Bash Syntax: The Only 50 Linux Commands You Actually Need to Know
════════════════════════
𐀪 Author: The4byss
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:49:38 GMT
════════════════════════
⌗ Tags: #hacking #linux #linux_tutorial #linux_commands
Medium
Stop Googling Bash Syntax: The Only 50 Linux Commands You Actually Need to Know
Imagine this: You’re deploying a new app, or troubleshooting a broken server, or just trying to navigate a remote database. You open the…
16 views
Daily Writeups
⤷ Title: Top 5 Mistakes Small Businesses Make With Cybersecurity
════════════════════════
𐀪 Author: Dureshahwar
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:55:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #small_business #data_security #infosec
Medium
Top 5 Mistakes Small Businesses Make With Cybersecurity
Most breaches do not happen because of sophisticated attacks. They happen because of
14 views
Daily Writeups
⤷ Title: What is a Vulnerability Assessment and Why Your Business Needs One
════════════════════════
𐀪 Author: Dureshahwar
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:46:36 GMT
════════════════════════
⌗ Tags: #business_tips #small_business #cybersecurity #data_security #infosec
Medium
What is a Vulnerability Assessment and Why Your Business Needs One
You don’t have to be a tech expert to protect your business, but you do need to know where you’re exposed.
17 views
Daily Writeups
⤷ Title: TryHackMe write-up: RootMe
════════════════════════
𐀪 Author: Viktor Chalyi
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:58:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_rootme #tryhackme
Medium
TryHackMe write-up: RootMe
Room
21 views
Daily Writeups
⤷ Title: Passing the Web Red Team Analyst
════════════════════════
𐀪 Author: The Husky Hacker
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:48:29 GMT
════════════════════════
⌗ Tags: #cyberwarfare_labs #ethical_hacking
Medium
Passing the Web Red Team Analyst
This was actually a pretty good exam. I've been lacking in attacks, and this course covered them very well. And passing the MFA was also a…
30 views
Daily Writeups
⤷ Title: Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:05:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anti_malware Client Version 4.18.26040.7 #CVE_2026_41091 Update #CVE_2026_45498 Denial of Service #Defender Security Advisory #Microsoft Defender Privilege Escalation #Microsoft Security Updates 2026 #Patch Verification Guide #System Level Privilege Escalation #Windows Endpoint Patch
Information Security News
Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
Microsoft has formally disseminated a security advisory detailing the successful remediation of critical vulnerabilities identified within the Microsoft
25 views
Daily Writeups
⤷ Title: The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against “YellowKey” BitLocker Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:45:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #autofstx.exe Registry Patch #BitLocker Bypass Vulnerability #CVE_2026_45585 Windows 11 #FsTx Auto Recovery Utility #MSRC Hotfix Guide #Physical Access Data Theft #Pre_Boot Authentication PIN #TPM Only Exploitation #Windows Recovery Environment #YellowKey WinRE Mitigation Script
Information Security News
The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against "YellowKey" BitLocker Bypass
Historically, independent security researchers bypassed standard coordinate disclosure protocols to directly publish an unhedged vulnerability residing within the
15 views
Daily Writeups
⤷ Title: The Reddit Clone: Meta Secretly Launches “Forum” App to Unbundle Facebook Groups
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:27:55 +0000
════════════════════════
⌗ Tags: #Technology #AI Ask Framework #Algorithmic Feeds Unbundling #Group Moderation Tools #High Fidelity Human Insight #Identity Federation Authentication #Knowledge Silo Extraction #Matt Navarra Leak #Meta Forum App Facebook Groups #Reddit Competitor Standalone Community Platform #Standalone Discussion Forums
Information Security News
The Reddit Clone: Meta Secretly Launches "Forum" App to Unbundle Facebook Groups
Devoid of any grand institutional pageantry or official marketing campaigns, Meta has surreptitiously debuted a nascent application designated
12 views