Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: OWASP API #6: Business Logic Flaws Explained
════════════════════════
𐀪 Author: Abrar Bin Habib
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 17:35:08 GMT
════════════════════════
⌗ Tags: #ethical_hacking #business_logic #api #owasp_top_10 #cybersecurity
Medium
OWASP API #6: Unrestricted Access to Sensitive Business Flows
Your API works perfectly but still gets hacked. Learn how attackers abuse business flows and how to stop them. Instagram story included.
35 views
Daily Writeups
⤷ Title: WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 00:41:15 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 21:59:16 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:26:46 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:26:35 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:17:09 +0530
════════════════════════
⌗ Tags: No_Tags
23 views
Daily Writeups
⤷ Title: File Upload Attacks: Alternative Exploitation Paths (XSS, XXE, DoS)
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:45:42 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #full_stack_developer #bug_bounty #cybersecurity #penetration_testing
Medium
File Upload Attacks: Alternative Exploitation Paths (XSS, XXE, DoS)
What happens when the upload form is actually secure — and why that doesn’t mean you’re out of options. Part 6 of the File Upload Attacks…
18 views
Daily Writeups
⤷ Title: When the vibes are high, but the guardrails are low.
════════════════════════
𐀪 Author: AlexN@InfoSec
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:12:21 GMT
════════════════════════
⌗ Tags: #application_security #vibe_coding #ai_governance #ai
Medium
When the vibes are high, but the guardrails are low.
The future of code development is a contested space.
12 views
Daily Writeups
⤷ Title: How I’m Using Burn-After-Read Encryption to Stop Data Breaches Before They Happen
════════════════════════
𐀪 Author: Doveway Onwuka
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:54:54 GMT
════════════════════════
⌗ Tags: #data_privacy #african_startup #hacking #cybersecurity
Medium
How I’m Using Burn-After-Read Encryption to Stop Data Breaches Before They Happen
Every week there is another data breach headline, and more often than not the root cause is frustratingly mundane: a payroll spreadsheet…
9 views
Daily Writeups
⤷ Title: The Quiet Killer in Grey Box Testing — Internal IP Leak → Path Traversal →DB Takeover → Outlook Pwn
════════════════════════
𐀪 Author: Mr_Curiosity
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:16:30 GMT
════════════════════════
⌗ Tags: #api_pentesting #web_hacking #pentest #hacking
Medium
The Quiet Killer in Grey Box Testing — Internal IP Leak → Path Traversal →DB Takeover → Outlook Pwn
Hy aLL !! Mr_Curi0sity here !!
11 views
Daily Writeups
⤷ Title: Road (THM) Tryhackme Medium Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:15:58 GMT
════════════════════════
⌗ Tags: #hacking #tryhackme #cybersecurity #pentesting #privilege_escalation
Medium
Road (THM) Tryhackme Medium Challenge
Description : Inspired by a real-world pentesting engagement
16 views
Daily Writeups
⤷ Title: AD Enumeration & Attacks — Skills Assessment Part I
════════════════════════
𐀪 Author: YashXD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:34:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #hackthebox #hackthebox_walkthrough #cybersecurity #active_directory
Medium
AD Enumeration & Attacks — Skills Assessment Part I
From “I Have a Shell” to “Oops, I Own the Domain”
16 views
Daily Writeups
⤷ Title: TryHackMe’s “Operation Promotion” CTF Walkthrough
════════════════════════
𐀪 Author: Omer David
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:54:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber #tryhackme_walkthrough #tryhackme #ethical_hacking
Medium
TryHackMe’s “Operation Promotion” CTF Walkthrough
Started by enumerating the machine with nmap, found a few open ports:
11 views
Daily Writeups
⤷ Title: TryHackMe write-up: Mother’s Secret
════════════════════════
𐀪 Author: Viktor Chalyi
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:43:31 GMT
════════════════════════
⌗ Tags: #information_security #ctf_writeup #cybersecurity #ctf #tryhackme
Medium
TryHackMe write-up: Mother’s Secret
Exploit flaws found in Mother’s code to reveal its secrets.
15 views
Daily Writeups
⤷ Title: Vulnhub: BOB 1.0.1 Walkthrough
════════════════════════
𐀪 Author: Antonio
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:01:00 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #ctf #vulnhub #ctf_writeup #vulnhub_walkthrough
Medium
Vulnhub: BOB 1.0.1 Walkthrough
Machine details
18 views
Daily Writeups
⤷ Title: Lab: Reflected XSS with some SVG markup allowed
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 20:05:05 GMT
════════════════════════
⌗ Tags: #education #cyber_security_awareness #web_development #ethical_hacking #cybersecurity
Medium
Lab: Reflected XSS with some SVG markup allowed
When auditing an application for Cross-Site Scripting (XSS), you frequently run into Web Application Firewalls (WAFs) or custom filters…
26 views
Daily Writeups
⤷ Title: How to Recover Data from iCloud Backup Without Resetting Your iPhone
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 21:27:58 +0000
════════════════════════
⌗ Tags: #How To #Backup #Data Recovery #ICLOUD #iOS #iPhone #Privacy #Technology
Hackread
How to Recover Data from iCloud Backup Without Resetting Your iPhone
Restore data from an iCloud backup without resetting your iPhone. Recover photos, messages, contacts, and more with simple, proven methods.
19 views
Daily Writeups
⤷ Title: The Gmail “Zombie Token” Google Refused to Kill
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:43:10 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #artificial_intelligence #python #bug_bounty
Medium
The Gmail “Zombie Token” Google Refused to Kill
Here is how I found a persistent authorization bypass in Gmail’s ‘Send Mail As’ feature, documented it with video proof, and got it closed…
12 views
Daily Writeups
⤷ Title: A Unique Case of One-Click Account Takeover via CSRF Chain
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
Medium
A Unique Case of One-Click Account Takeover
Hello everyone! Today I want to walk through an account takeover vulnerability I found recently. At its core, the issue was a CSRF…
20 views
Daily Writeups
⤷ Title: When Your Login System Becomes the Attacker: PAM Modules as a Double-Edged Sword
════════════════════════
𐀪 Author: Adolph Gasper
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 21:45:59 GMT
════════════════════════
⌗ Tags: #ssh #cybersecurity #backdoor #red_team #hacking
Medium
When Your Login System Becomes the Attacker: PAM Modules as a Double-Edged Sword
In the last article, we examined how nginx modules, a tool designed to serve web traffic, can be exploited by an attacker who has gained a…
14 views
Daily Writeups
⤷ Title: How I Pivoted Through a Three-Machine Network on TryHackMe: A Wreath Walkthrough
════════════════════════
𐀪 Author: Soumyadipta Birabar
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 21:16:58 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #information_security #hacking #tryhackme
Medium
How I Pivoted Through a Three-Machine Network on TryHackMe: A Wreath Walkthrough
Wreath is not a room. It’s a network. Three machines, each isolated from the other, and your job is to get through all of them using only…
17 views