Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: AI Generated Code Vulnerabilities Threaten Emerging Dev Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:09:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automated Code Generation #Exploit Verification #Model Context Protocol #Software Engineering #Software Supply Chain #TrendAI Research
Daily CyberSecurity
AI Generated Code Vulnerabilities Threaten Emerging Dev Ecosystems
New research explores AI generated code vulnerabilities within MCP server repositories. Learn why expert domain verification remains critical.
17 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #43: Login Page?
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:41 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #43: Login Page? No Worries — Weak Passwords, Default Creds, and the Art of Getting In (Without Breaking a…
Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning. But guess what? Half the time, the devs…
12 views
Daily Writeups
⤷ Title: I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:26 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic #web_security #ethical_hacking #cybersecurity
Medium
I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in one request.
12 views
Daily Writeups
⤷ Title: I Typed 000000 and the App Thought MFA Was Already On
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:08 GMT
════════════════════════
⌗ Tags: #web_security #hacking #cybersecurity #bug_bounty #infosec
Medium
I Typed 000000 and the App Thought MFA Was Already On
I never scanned the QR code. One intercepted response was enough.
19 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:16:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin Privileges”
JSON Web Tokens are everywhere — in cookies, Authorization headers, and API calls. But a misconfigured algorithm or a reusable key can turn…
16 views
Daily Writeups
⤷ Title: Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:15:57 GMT
════════════════════════
⌗ Tags: #githubdorks #bug_bounty #management_secrets #cybersecurity #frontend_security
Medium
Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
The .env file is simultaneously one of the most convenient and most dangerous patterns in modern web development. The data is clear: over…
17 views
Daily Writeups
⤷ Title: I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic #web_security #ethical_hacking #cybersecurity
Medium
I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in one request.
21 views
Daily Writeups
⤷ Title: I Typed 000000 and the App Thought MFA Was Already On
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:07 GMT
════════════════════════
⌗ Tags: #web_security #hacking #cybersecurity #bug_bounty #infosec
Medium
I Typed 000000 and the App Thought MFA Was Already On
I never scanned the QR code. One intercepted response was enough.
11 views
Daily Writeups
⤷ Title: A Unique Case of One-Click Account Takeover
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
Medium
A Unique Case of One-Click Account Takeover
Hello everyone! Today I want to walk through an account takeover vulnerability I found recently. At its core, the issue was a CSRF…
10 views
Daily Writeups
⤷ Title: Investigation Breakdown — Part 4
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:49:59 GMT
════════════════════════
⌗ Tags: #hacking #security #cybersecurity #true_crime #osint
Medium
🚨 Investigation Breakdown — Part 4
How Scam Domains Rotate To Avoid Detection
12 views
Daily Writeups
⤷ Title: TryHackMe THM Threat Modeling for Pentesters Walkthrough / Answers
════════════════════════
𐀪 Author: thmflags
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:39:23 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #hacking #tryhackme #cybersecurity #tryhackme_writeup
Medium
TryHackMe THM Threat Modeling for Pentesters Walkthrough / Answers
Task 1
12 views
Daily Writeups
⤷ Title: Breach Files #002: NotPetya (2017)
════════════════════════
𐀪 Author: NullyBlissful
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 06:54:44 GMT
════════════════════════
⌗ Tags: #threat_intelligence #infosec #mitre_attack #cybersecurity #malware
Medium
Breach Files #002: NotPetya (2017)
The Malware That Wasn’t Ransomware — And Cost the World $10 Billion
17 views
Daily Writeups
⤷ Title: Mastering Frida: Solving the OWASP MSTG Android Lab Challenges
════════════════════════
𐀪 Author: Basithmohammedali
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:37:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #mobile_security #owasp_top_10 #frida #android_security
Medium
Mastering Frida: Solving the OWASP MSTG Android Lab Challenges
Introduction
20 views
Daily Writeups
⤷ Title: Firewall and IDS/IPS Evasion using Nmap
════════════════════════
𐀪 Author: Aviral-S-Mishra
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:35:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #cybersecurity #information_security
Medium
Firewall and IDS/IPS Evasion using Nmap
Introduction
31 views
Daily Writeups
⤷ Title: How I Passed CompTIA Security+ in 30 Days Starting From Zero
════════════════════════
𐀪 Author: Amandeep Singh
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:57:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #comptia_security_plus #certification_exam #career_development #cybersecurity
Medium
How I Passed CompTIA Security+ in 30 Days Starting From Zero
No prior security experience. No strict study schedule. Just the right resources and a simple plan that worked.
45 views
Daily Writeups
⤷ Title: Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 15:21:28 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 15:03:57 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: Five Eyes Warns Chinese Spies Are Using Fake Job Ads to Target Military Staff
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:53:45 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #Scams and Fraud #China #Cybersecurity #Five Eyes #Fraud #Indeed #LinkedIn #Upwork
Hackread
Five Eyes Warns Chinese Spies Are Using Fake Job Ads to Target Military Staff
Five Eyes warns that Chinese spies are using fake job ads on LinkedIn, Indeed, and Upwork to target military staff and steal sensitive data.
21 views
Daily Writeups
⤷ Title: DriveSurge Threat Cluster Exploits Thousands of Websites Globally
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:54:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ClickFix #DriveSurge #FakeUpdates #Infrastructure Fingerprinting #initial access broker #malware delivery #social engineering #zTDS
Daily CyberSecurity
DriveSurge Threat Cluster Exploits Thousands of Websites Globally
The active DriveSurge threat cluster is compromising thousands of websites. Discover how its customized Traffic Distribution System redirects victims.
14 views
Daily Writeups
⤷ Title: New Microsoft Teams Vishing Attack Exploits Quick Assist to Deploy Stealthy Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:11:29 +0000
════════════════════════
⌗ Tags: #Malware #eSentire TRU #InboxSetupPro #Legal Sector Cyberattack #Microsoft Teams #Nimbus RAT #Quick Assist Exploitation #Vishing Attack
Daily CyberSecurity
New Microsoft Teams Vishing Attack Exploits Quick Assist to Deploy Stealthy Malware
Learn how a Microsoft Teams vishing attack leverages email flooding and Quick Assist to execute a dangerous Nimbus RAT deployment chain.
17 views
Daily Writeups
⤷ Title: My First Bug in College Portal -IDOR,PII,SQL over 30,000 students information Leaks.
════════════════════════
𐀪 Author: Lo_ki_18
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:02:08 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_writeup #bug_bounty #idor_vulnerability #bug_bounty_tips
Medium
My First Bug in College Portal -IDOR,PII,SQL over 30,000 students information Leaks.
Hey Hackers 👋
14 views