Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: I Sent One Email to “Forgot Password” and the Server Doxxed the User Back
════════════════════════
𐀪 Author: Pankaj Kumar Yadav
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:27:52 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #data_science #bug_bounty
Medium
I Sent One Email to “Forgot Password” and the Server Doxxed the User Back
How a bug bounty target turned a password reset into a full identity leak — and paid me for it
22 views
Daily Writeups
⤷ Title: CSRF Protection Bypass via Method Confusion Leading to Full Account Takeover
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:39:31 GMT
════════════════════════
⌗ Tags: #security #writing_tips #bugbounty_writeup #hacking
Medium
CSRF Protection Bypass via Method Confusion Leading to Full Account Takeover
The TV login sync feature on tvs.redacted.com allows an attacker to fully take over any redacted user account. By converting a POST request…
19 views
Daily Writeups
⤷ Title: Investigation Breakdown — Part 3
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:50:37 GMT
════════════════════════
⌗ Tags: #security #hacking #cybersecurity #true_crime #information_security
Medium
🚨 Investigation Breakdown — Part 3
Anatomy Of A Fake Technical Support Scam
19 views
Daily Writeups
⤷ Title: Exploitation Basics — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:14:59 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #cyber_security_awareness #web_development
Medium
Exploitation Basics — part 1
Moniker Link (CVE-2024–21413)
18 views
Daily Writeups
⤷ Title: The Payload That Bypassed the Filter
════════════════════════
𐀪 Author: EL_Cazad0r
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:54:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty_tips #penetration_testing #bug_bounty
Medium
The Payload That Bypassed the Filter
The payload I used during testing was:
17 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection UNION attack, determining the number of columns returned…
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:37:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf_writeup #portswigger #sql_injection #ctf
Medium
Panduan Lab Portwigger (Lab: SQL injection UNION attack, determining the number of columns returned…
Lab ini kita menentukan jumlah kolom yang dikembalikan oleh kueri asli aplikasi pada fitur filter kategori produk. Lab akan dianggap…
23 views
Daily Writeups
⤷ Title: Dive Into Pentesting:Jr Penetration Tester
════════════════════════
𐀪 Author: Cypher
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:30:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
Dive Into Pentesting:Jr Penetration Tester
Learn the basics of penetration testing, from methodology to responsible practice
28 views
Daily Writeups
⤷ Title: Cryptography Concepts — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:20:25 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme #tryhackme_pre_security #cryptography
Medium
Cryptography Concepts — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Cryptography Concepts
Room URL: https://tryhackme.com/room/cryptographyconcepts
Difficulty: Medium
Please attempt…
39 views
Daily Writeups
⤷ Title: Frostbyte CTF writeup: chaining LDAP injection, password reuse, second-order SQLi to RCE
════════════════════════
𐀪 Author: Razzle Mouse
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:11:43 GMT
════════════════════════
⌗ Tags: #ldapinjection #secondordersqli #ctf_writeup #rce
Medium
Frostbyte CTF writeup: chaining LDAP injection, password reuse, second-order SQLi to RCE
Platform: WebverseLabs CTF
37 views
Daily Writeups
⤷ Title: Sicoob SDK Banking Malware Exploits NuGet Developer Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:12:31 +0000
════════════════════════
⌗ Tags: #Malware #Financial Cybercrime #NuGet Malware #Sicoob.Sdk #Socket Security #supply chain attack
Daily CyberSecurity
Sicoob SDK Banking Malware Exploits NuGet Developer Channels
A dangerous Sicoob SDK banking malware campaign triggers a major NuGet supply chain attack. Learn how it exfiltrates private financial certificates.
30 views
Daily Writeups
⤷ Title: Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:54:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9082 #Drupal Core #PostgreSQL Superuser #Remote Code Execution #sql injection #threat analysis
Daily CyberSecurity
Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
A critical Drupal SQL injection exploit is active in the wild. Read the analysis of this flaw now that the wild exploit PoC is fully public.
31 views
Daily Writeups
⤷ Title: The Massive Gentlemen Ransomware Threat Sweeping Global Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:11:45 +0000
════════════════════════
⌗ Tags: #Malware #Double Extortion #Malware Analysis #Ransomware_as_a_Service #Storm_2697 #XChaCha20
Daily CyberSecurity
The Massive Gentlemen Ransomware Threat Sweeping Global Networks
A deep Gentlemen ransomware threat analysis by Microsoft Threat Intelligence reveals an aggressive worm capability and double extortion tactics.
21 views
Daily Writeups
⤷ Title: From a Single Parameter to Persistent Admin Access: A Privilege Escalation Rooted in Business Logic
════════════════════════
𐀪 Author: Vivekbhatt Sec
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:38:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #web_security #ethical_hacking #bug_bounty
Medium
From a Single Parameter to Persistent Admin Access: A Privilege Escalation Rooted in Business Logic
TL;DR
24 views
Daily Writeups
⤷ Title: How I Started Learning Recon, Hunting Bugs & Thinking Like a Hacker
════════════════════════
𐀪 Author: Zoheb Khan
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:58:48 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #security #bug_bounty
Medium
How I Started Learning Recon, Hunting Bugs & Thinking Like a Hacker
Day 1 — My Bug Bounty Journey Begins
17 views
Daily Writeups
⤷ Title: Nginx Rift (CVE-2026–42945)
════════════════════════
𐀪 Author: rezauditore
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:30:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #nginx #programming #coding
Medium
Nginx Rift (CVE-2026–42945)
18 Year Old State Mismatch!
17 views
Daily Writeups
⤷ Title: A Five-Agent Pipeline Is Quietly Changing How Bug Bounty Reports Get Written
════════════════════════
𐀪 Author: gpt ai clips
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:03:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #programming #cybersecurity #open_source
Medium
A Five-Agent Pipeline Is Quietly Changing How Bug Bounty Reports Get Written
What happens when you give Claude Code a recon module, a fuzzer, a validator, a reporter, and a triage gate.
21 views
Daily Writeups
⤷ Title: PortSwigger 學習筆記｜SQL Injection：從資料風險角度理解 Web Security
════════════════════════
𐀪 Author: Chun Han
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:32:16 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #sql_injection #application_security #data_science
Medium
PortSwigger 學習筆記｜SQL Injection：從資料風險角度理解 Web Security
我一開始對 SQL Injection 的理解其實很基礎。過去我知道它大概是因為應用程式把 user input 直接放進 SQL query，導致有心人士可以透過特定字元或語法改變原本的查詢邏輯，進而讀取、繞過或影響資料庫中的資訊。但在真正開始做 PortSwigger…
21 views
Daily Writeups
⤷ Title: Cyber Threat Review: Wolves of Turan are hitting Armenia’s electoral Infrastructure
════════════════════════
𐀪 Author: Bobswallower
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:45:31 GMT
════════════════════════
⌗ Tags: #türkçe #hacking #cyber_threat_intelligence #armenia
Medium
Cyber Threat Review: Wolves of Turan are hitting Armenia’s electoral Infrastructure
Pro-Turkish hacktivists Wolves of Turan posted data from the platform yesterday http://elections.mia.gov.am (Ministry of Internal Affairs…
16 views
Daily Writeups
⤷ Title: Crypto wallets explained: the key to everything in web3 (and the mistake that costs people…
════════════════════════
𐀪 Author: Anne Usoroh
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:35:11 GMT
════════════════════════
⌗ Tags: #hacking #seed_phrase #crypto_wallet
Medium
Crypto wallets explained: the key to everything in web3 (and the mistake that costs people…
Your wallet isn’t where your crypto lives. Understanding that one thing changes how you think about all of web3.
11 views
Daily Writeups
⤷ Title: Before I Learned to Hack, I Learned to Investigate
════════════════════════
𐀪 Author: Mohan Sai Krishna G M
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:04:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #offensive_security #penetration_testing #red_team
Medium
Before I Learned to Hack, I Learned to Investigate
Understanding the systems behind the tools and the thinking behind the findings.
14 views
Daily Writeups
⤷ Title: What Actually Happens During a Penetration Test From Someone Who Does Them
════════════════════════
𐀪 Author: mrwhite18
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:46:00 GMT
════════════════════════
⌗ Tags: #web_application_security #vapt #ethical_hacking #security_testing #penetration_testing
Medium
What Actually Happens During a Penetration Test From Someone Who Does Them
Most people hear “penetration test” and picture a guy in a hoodie furiously typing in a dark room while green text scrolls down his screen.
22 views