Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Session Revocation Failure — “Sign Out All Other Web Sessions” Non-Functional
════════════════════════
𐀪 Author: Just_try_shit
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:58:10 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #authentication #logic #bug_bounty_writeup #bug_bounty
Medium
Session Revocation Failure — “Sign Out All Other Web Sessions” Non-Functional
Most users never think twice about the “Sign Out Everywhere” button. They click it, assume every session is gone, and move on.
22 views
Daily Writeups
⤷ Title: Behind the Job Description: Unpacking the Hidden Malware Framework (Part 2)
════════════════════════
𐀪 Author: Sivasankar Das
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:50:29 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #malware #ethical_hacking #bug_bounty #malware_analysis
19 views
Daily Writeups
⤷ Title: Chaining OAuth2 Dynamic Client Registration to Full Account Takeover — Stealing Access Tokens via…
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:46:35 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity
Medium
Chaining OAuth2 Dynamic Client Registration to Full Account Takeover — Stealing Access Tokens via MCP Server
By Divakar Vasani
16 views
Daily Writeups
⤷ Title: When “One-Time” Isn’t Enough: The Case of the Reusable Magic Link
════════════════════════
𐀪 Author: Just_try_shit
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:36:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #passwordless #bug_bounty_writeup #bugcrowd
Medium
When “One-Time” Isn’t Enough: The Case of the Reusable Magic Link
Introduction
13 views
Daily Writeups
⤷ Title: No Username. No Password. Just a Header — A $3,000 Authentication Bypass
════════════════════════
𐀪 Author: ALR
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:16:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #hackerone #bug_bounty_writeup #cybersecurity
Medium
No Username. No Password. Just a Header — A $3,000 Authentication Bypass
First of all, Alhamdulillah. Every finding teaches something new, and this one reminded me that sometimes the most critical vulnerabilities…
23 views
Daily Writeups
⤷ Title: Your Security Awareness Training Is a Map for Attackers
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:01:00 GMT
════════════════════════
⌗ Tags: #cyber_risk #threat_modeling #application_security #cybersecurity #security_engineering
Medium
Your Security Awareness Training Is a Map for Attackers
How standardized behavior creates predictable targets — and what to do about it
13 views
Daily Writeups
⤷ Title: The Biggest Cybersecurity Risk
in 2026 Isn’t AI ,
It’s Human Trust
════════════════════════
𐀪 Author: Vinura_Gunathilaka
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:06:19 GMT
════════════════════════
⌗ Tags: #security_culture #infosec #leadership #zero_trust #cybersecurity
Medium
The Biggest Cybersecurity Risk
in 2026 Isn’t AI ,
It’s Human Trust
Organizations spend millions on tools and platforms. Yet attackers keep winning. The reason isn’t technical ,it never was.
14 views
Daily Writeups
⤷ Title: Hacker 101 CTF — A little something to get you started
════════════════════════
𐀪 Author: Snappy
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:00:58 GMT
════════════════════════
⌗ Tags: #ctf #hacker101 #cybersecurity #web_security #infosec
Medium
Hacker 101 CTF — A little something to get you started
Today, I’m breaking down my solution for the challenge: “A little something to get you started.” This is a web-based challenge rated as…
15 views
Daily Writeups
⤷ Title: Security Solutions — part 2
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:12:27 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_development #cybersecurity #infosec #cyber_security_awareness
Medium
Security Solutions — part 2
Firewall Fundamentals
13 views
Daily Writeups
⤷ Title: PortSwigger Lab: Unprotected admin functionality
════════════════════════
𐀪 Author: Ramkumar
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:02:47 GMT
════════════════════════
⌗ Tags: #penetration_testing #idor #portswigger #ctf #cybersecurity
Medium
PortSwigger Lab: Unprotected admin functionality
This lab has an unprotected admin panel.
21 views
Daily Writeups
⤷ Title: Oh My WebServer -TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:06:22 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #ctf
Medium
Oh My WebServer -TryHackMe WriteUp with Flags
Date: 03/06/2026
19 views
Daily Writeups
⤷ Title: 7 Security Tools I Use Constantly, But Rarely Talk About
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:49:40 GMT
════════════════════════
⌗ Tags: #coding #cybersecurity #ethical_hacking #programming #technology
Medium
7 Security Tools I Use Constantly, But Rarely Talk About
The quiet workhorses behind real investigations.
35 views
Daily Writeups
⤷ Title: SQL Injection in Login Forms: Still Killing Auth in 2026
════════════════════════
𐀪 Author: johnnattakit 0xDD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:02:45 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #sql_injection #owasp_top_10 #penetration_testing
Medium
SQL Injection in Login Forms: Still Killing Auth in 2026
TL;DR: A single unsanitized parameter in a login form can let an attacker walk in as admin — no password needed. Here’s how it works, how…
45 views
Daily Writeups
⤷ Title: One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 18:28:22 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: China-Linked TA4922 Hackers Target UK, Europe With New SilentRunLoader Malware
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:30:03 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Malware #Atlas RAT #China #Cyber Attack #Cybersecurity #DLL #Phishing #Proofpoint #RomulusLoader #SilentRunLoader #TA4922 #ValleyRAT #Winos4.0
Hackread
China-Linked TA4922 Hackers Target UK, Europe With New SilentRunLoader Malware
TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.
34 views
Daily Writeups
⤷ Title: From Zero to $8,500: Exploiting a Flawed Reset Token Validation to Bypass MFA and Take Over…
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:11:00 GMT
════════════════════════
⌗ Tags: #pentesting #security #bug_bounty_writeup #bug_bounty #cybersecurity
Medium
From Zero to $8,500: Exploiting a Flawed Reset Token Validation to Bypass MFA and Take Over…
It was late on a Friday night, and I was deep-diving into a private bug bounty program for a major B2B SaaS platform. Let’s call the target…
22 views
Daily Writeups
⤷ Title: File Upload Attacks: Bypassing Type Filters
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:46:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #file_upload_vulnerability #full_stack_developer
Medium
File Upload Attacks: Bypassing Type Filters
When the server stops trusting the filename and starts looking at what’s inside — and why that’s still not enough. Part 5 of the File…
20 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #43: Login Page?
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:03:25 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #43: Login Page? No Worries — Weak Passwords, Default Creds, and the Art of Getting In (Without Breaking a…
Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning. But guess what? Half the time, the devs…
23 views
Daily Writeups
⤷ Title: Infected USB Case Study: Recovering Hidden Files and Tracing the Malware Chain
════════════════════════
𐀪 Author: VXRL
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:29:14 GMT
════════════════════════
⌗ Tags: #malware #cybersecurity #hacking
Medium
Infected USB Case Study: Recovering Hidden Files and Tracing the Malware Chain
Researcher: {Jack Man}
17 views
Daily Writeups
⤷ Title: Pelican — ZooKeeper Command Injection + gcore Memory Dump
════════════════════════
𐀪 Author: Aashiqoffortune
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:16:59 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #offensive_security #privilege_escalation
Medium
Pelican — ZooKeeper Command Injection + gcore Memory Dump
cybersecurity, pentesting, oscp, ethical-hacking, privilege-escalation.
24 views
Daily Writeups
⤷ Title: IDOR Leading to Account Takeover via Email Reassignment
════════════════════════
𐀪 Author: Damian Gambacorta
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:26:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #penetration_testing
Medium
IDOR Leading to Account Takeover via Email Reassignment
The OliveX Files | By Damian Gambacorta
22 views