Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: Cracking BlindSQLi : What Hitting a 3-Hour Wall Taught Me About Data Extraction
════════════════════════
𐀪 Author: Supremkrk
════════════════════════
ⴵ Time: Sun, 24 May 2026 18:54:41 GMT
════════════════════════
⌗ Tags: #portswigger_lab #cybersecurity #portswigger_academy_labs #sql_injection #blind_sql_injection
Medium
Cracking BlindSQLi : What Hitting a 3-Hour Wall Taught Me About Data Extraction
Expectation vs. Reality
24 views
Daily Writeups
⤷ Title: How a Simple Endpoint Exposed /etc/passwd via Path Traversal
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Researcher
════════════════════════
ⴵ Time: Sun, 24 May 2026 19:07:05 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #information_security #bug_bounty_tips #path_traversal
Medium
How a Simple Endpoint Exposed /etc/passwd via Path Traversal
Hello guys, after a while, here’s a simple but classic vulnerability I came across while testing a feature on target.com.
36 views
Daily Writeups
⤷ Title: Amaterasu | ProvingGrounds | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:57:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #hacking #bug_bounty_tips #ctf
Medium
Amaterasu | ProvingGrounds | OSCP Preparation
As always, lets start off with a nmap scan of the target:
38 views
Daily Writeups
⤷ Title: Devoured by Bots: How a Missing Parameter Enabled 100% MEV Leakage in a DeFi Zap Contract
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:11:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #smart_contracts #web3 #defi #infosec
Medium
Devoured by Bots: How a Missing Parameter Enabled 100% MEV Leakage in a DeFi Zap Contract
A deep dive into slippage vulnerabilities, sandwich attacks, and why convenience in DeFi often comes at the cost of security.
23 views
Daily Writeups
⤷ Title: How a $10 USB Drive Defeated a Million-Dollar Firewall
════════════════════════
𐀪 Author: The4byss
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:40:34 GMT
════════════════════════
⌗ Tags: #hacking #information_technology #security #technology #tech
23 views
Daily Writeups
⤷ Title: Defending the Information Mirage: Securing the Model Context Protocol (MCP) in Agentic Autonomous…
════════════════════════
𐀪 Author: saikrishna G.S
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:59:15 GMT
════════════════════════
⌗ Tags: #infosec #artificial_intelligence #model_context_protocol #ai_agent #cybersecurity
Medium
Defending the Information Mirage: Securing the Model Context Protocol (MCP) in Agentic Autonomous…
The Agentic SOC Era: Architecting Next-Generation Incident Response with Open Context Standardization
23 views
Daily Writeups
⤷ Title: ContAInment a Ransomware Threat · AI Security · TryHackMe Walkthrough
════════════════════════
𐀪 Author: Rajesh Sudam
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:17:28 GMT
════════════════════════
⌗ Tags: #technology #tryhackme #ransomeware #incident_response #cybersecurity
Medium
ContAInment a Ransomware Threat · AI Security · TryHackMe Walkthrough
I had been away from TryHackMe for a short while and when I came back, ContAInment was the first room that caught my attention in the AI…
26 views
Daily Writeups
⤷ Title: CYBERTALENTS CTF : “This is Sparta” write up.
════════════════════════
𐀪 Author: OwL
════════════════════════
ⴵ Time: Sun, 24 May 2026 20:55:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_talents #ethical_hacking #ctf
Medium
CYBERTALENTS CTF : “This is Sparta” write up.
Challenge Description
38 views
Daily Writeups
⤷ Title: API Pentesting | TryHackMe | practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 24 May 2026 19:36:00 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #pentesting #api_security #rest_api #cybersecurity
Medium
API Pentesting | TryHackMe | practical challenge
Explore how to identify and exploit common API security vulnerabilities.
40 views
Daily Writeups
⤷ Title: How I Used a Race Condition to Get Unlimited Subscriptions from One Voucher on Shahid.net️
════════════════════════
𐀪 Author: Hamzawy | 0xMo3Gza
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:51:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #hackerone #yeswehack #bugs #cybersecurity
Medium
How I Used a Race Condition to Get Unlimited Subscriptions from One Voucher on Shahid.net🎞️
السلام عليكم ورحمة الله
30 views
Daily Writeups
⤷ Title: How I Found a Permanent Account Takeover Through SSO Account Linking Misconfiguration
════════════════════════
𐀪 Author: El Professor Qais
════════════════════════
ⴵ Time: Sun, 24 May 2026 21:06:27 GMT
════════════════════════
⌗ Tags: #google_sso #bugcrowd #bug_bounty #account_takeover #bug_bounty_tips
Medium
How I Found a Permanent Account Takeover Through SSO Account Linking Misconfiguration
Educational write-up for security research and responsible disclosure purposes only. Founded it in BugCrowd Private Program 🔥
23 views
Daily Writeups
⤷ Title: SecLeaf 2026 Challenge Forense: Forgotten_snapshot
════════════════════════
𐀪 Author: 091!
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:09:53 GMT
════════════════════════
⌗ Tags: #red_team #forense #ctf #hacking #spanish_writeup
Medium
SecLeaf 2026 Challenge Forense: Forgotten_snapshot
Como primera instrucción nos dan la siguiente pista y descripción sobre nuestro reto a resolver.
17 views
Daily Writeups
⤷ Title: Remote PEB Walking: Enumerating Loaded Modules
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 24 May 2026 21:42:16 GMT
════════════════════════
⌗ Tags: #infosec #malware #hacking #pentesting #cybersecurity
Medium
Remote PEB Walking: Enumerating Loaded Modules
Welcome to this new Medium post, today we are enumerating remote modules walking the PEB, a stealthy way to do it instead of relay on the…
17 views
Daily Writeups
⤷ Title: CyberDefenders — AWSRaid Lab Writeup
════════════════════════
𐀪 Author: JBXSec
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:43:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #infosec #threat_hunting #aws
Medium
CyberDefenders — AWSRaid Lab Writeup
Overview
14 views
Daily Writeups
⤷ Title: CyberDefenders — LummaStealer — Angry Likho Lab Writeup
════════════════════════
𐀪 Author: JBXSec
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:39:14 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ctf_writeup #threat_hunting #dfir
Medium
CyberDefenders — LummaStealer — Angry Likho Lab Writeup
Overview
15 views
Daily Writeups
⤷ Title: Hacking HTTPBin: Uncovering a Critical Base64 Reflected XSS Vulnerability
════════════════════════
𐀪 Author: INTELEON404
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:59:10 GMT
════════════════════════
⌗ Tags: #xs #cybersecurity #httpbin #penetration_testing #web_security
Medium
Hacking HTTPBin: Uncovering a Critical Base64 Reflected XSS Vulnerability
How directory fuzzing revealed a dangerous Cross-Site Scripting flaw in one of the most popular HTTP testing services.
14 views
Daily Writeups
⤷ Title: Offensive Security Intro
════════════════════════
𐀪 Author: S4m1X
════════════════════════
ⴵ Time: Sun, 24 May 2026 22:23:00 GMT
════════════════════════
⌗ Tags: #tryhackme_pre_security #tryhackme_walkthrough #offensive_security_intro #tryhackme #tryhackme_writeup
Medium
Offensive Security Intro
Dans cet article, nous allons découvrir comment exploiter une mauvaise configuration web avec TryHackMe en utilisant Gobuster et des…
18 views
Daily Writeups
⤷ Title: Mobile Malware Analysis — TryHackMe — Walkthrough
════════════════════════
𐀪 Author: Ransom.Sezan
════════════════════════
ⴵ Time: Sun, 24 May 2026 21:14:24 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #mobile_malware_analysis #room
Medium
Mobile Malware Analysis — TryHackMe — Walkthrough
Task-2:
26 views
Daily Writeups
⤷ Title: NGINX Fixes Critical Poolslip Flaw Allowing Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 00:44:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_9256 #F5 #nginx #Poolslip #Regular Expression
Daily CyberSecurity
NGINX Fixes Critical Poolslip Flaw Allowing Remote Code Execution
An NGINX heap buffer overflow vulnerability known as poolslip allows remote code execution. Learn how to secure your network servers now.
28 views
Daily Writeups
⤷ Title: Spring Boot Actuator expuesto conduce a Account Takeover (ATO)
════════════════════════
𐀪 Author: Miguel Segovia Gil
════════════════════════
ⴵ Time: Sun, 24 May 2026 23:10:05 GMT
════════════════════════
⌗ Tags: #appsec #bug_bounty #bugbounty_writeup #cybersecurity #bug_bounty_tips
Medium
Spring Boot Actuator expuesto conduce a Account Takeover (ATO)
Los actuators de Spring Boot se emplean para exponer información operacional de la aplicación en tiempo de ejecución, incluyendo estado del…
27 views
Daily Writeups
⤷ Title: Rolling Dice on a $60 handheld
════════════════════════
𐀪 Author: Ming
════════════════════════
ⴵ Time: Mon, 25 May 2026 00:15:13 GMT
════════════════════════
⌗ Tags: #coding #computer_graphics #game_development #software_development #hacking
Medium
Rolling Dice on a $60 handheld
In the last post, “Porting Raylib to a $60 GBA clone”, I described how I convinced Raylib to draw 3D scenes on a budget handheld — the…
30 views