Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: AI Security: explanation to Exploitation || Part 1
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:41:50 GMT
════════════════════════
⌗ Tags: #jailbreak #bugbounty_writeup #cybersecurity #ai_security #bug_bounty
Medium
AI Security: explanation to Exploitation || Part 1
Hello Everyone,
28 views
Daily Writeups
⤷ Title: How I Built a Burp Extension Efficiently with Claude
════════════════════════
𐀪 Author: Raymond Van Wart
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:41:18 GMT
════════════════════════
⌗ Tags: #web_application_security #bug_bounty #cybersecurity #pentesting
Medium
How I Built a Burp Extension Efficiently with Claude
The hardest part of building a Burp extension used to be the code — now it’s just coming up with the idea.
28 views
Daily Writeups
⤷ Title: Hacking a Fortune 500 Finance Company via Envoy Proxy Misconfiguration
════════════════════════
𐀪 Author: Alimuhammadsecured
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:40:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #technical_writing #web_hacking
Medium
Hacking a Fortune 500 Finance Company via Envoy Proxy Misconfiguration
When hunting on a site I tend to just poke around, gauge the functionality and see logically what can be broken before I fuzz.
33 views
Daily Writeups
⤷ Title: Discovering a Security Flaw in a Government Portal Used by 3 Lakh+ Students
════════════════════════
𐀪 Author: Prince Raj
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:54:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #bug_bounty #web_development #web_security
Medium
Discovering a Security Flaw in a Government Portal Used by 3 Lakh+ Students
A few weeks ago, while interacting with the Bihar State Education Finance Corporation (BSEFCL) portal, I came across something that seemed…
23 views
Daily Writeups
⤷ Title: Blind SSRF: You Can’t See the Response. You Don’t Need To.
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 17:54:57 GMT
════════════════════════
⌗ Tags: #ssrf_attack #web_development #bug_bounty #cybersecurity #pentesting
Medium
Blind SSRF: You Can’t See the Response. You Don’t Need To.
The server is still making requests. You just have to find a different way to know that. Part 3 of the SSRF series.
19 views
Daily Writeups
⤷ Title: CVSS is a severity score. You’re using it as a priority list.
════════════════════════
𐀪 Author: Kay Adelaja
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 19:08:39 GMT
════════════════════════
⌗ Tags: #application_security
Medium
CVSS is a severity score. You’re using it as a priority list.
I once paid top dollar for a bug that didn’t have a CVSS score at all.
11 views
Daily Writeups
⤷ Title: This AI Can Teach You Hacking Faster
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 19:29:24 GMT
════════════════════════
⌗ Tags: #technology #tech #hacking #cybersecurity #ai
Medium
This AI Can Teach You Hacking Faster
Stuck on a Reverse Shell? It Has Your Back
14 views
Daily Writeups
⤷ Title: Hacking Into A Server Through FTP
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:37:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #information_security #linux #hacking
Medium
Hacking Into A Server Through FTP
Yes, There are Still Servers That Use It
10 views
Daily Writeups
⤷ Title: Linux. Part 4: The Treasure Hunter’s Toolkit
════════════════════════
𐀪 Author: Ashar Arif
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 17:24:31 GMT
════════════════════════
⌗ Tags: #command_line #linux #bash #hacking #cybersecurity
Medium
Linux. Part 4: The Treasure Hunter’s Toolkit
The Missing Configuration File
10 views
Daily Writeups
⤷ Title: Android App Penetration Testing: From APK Decompilation to Runtime Exploitation [Tools and Labs]
════════════════════════
𐀪 Author: Khaledyassen
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:37:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #security #android_pentesting #infosec
Medium
Android App Penetration Testing: From APK Decompilation to Runtime Exploitation [Tools and Labs]
Hello, everyone. I hope you are well.
22 views
Daily Writeups
⤷ Title: Re-Anchoring the Basics: Reflecting on My GRC Fundamentals Certification
════════════════════════
𐀪 Author: Snappy
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:14:13 GMT
════════════════════════
⌗ Tags: #risk_management #leadership #grc #infosec #cybersecurity
Medium
Re-Anchoring the Basics: Reflecting on My GRC Fundamentals Certification
In the fast-paced world of Information Security, it is incredibly easy to get caught up in the latest zero-day exploits, flashing dashboard…
17 views
Daily Writeups
⤷ Title: The RTO Challan Scam Is Still Alive — Despite Arrests, Victim Data Keeps Leaking
════════════════════════
𐀪 Author: Karan Dhillon
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:03:26 GMT
════════════════════════
⌗ Tags: #cybercrime #infosec #cyber_cell #android #india
Medium
The RTO Challan Scam Is Still Alive — Despite Arrests, Victim Data Keeps Leaking
I uncovered the backend months ago. Other projects kept me from publishing. But the servers never went down.
15 views
Daily Writeups
⤷ Title: SQL Injection Leading to Administrator Authentication Bypass
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:16:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cybersecurity #artificial_intelligence #web_application_security
Medium
SQL Injection Leading to Administrator Authentication Bypass
Severity
18 views
Daily Writeups
⤷ Title: TryHackMe — Re-Tessting| Walkthrough (THM)
════════════════════════
𐀪 Author: Ujjalmandal
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:11:31 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #solutions #tryhackme
Medium
TryHackMe — Re-Tessting| Walkthrough (THM)
A penetration test delivers a report. The client implements fixes. Then they ask you the question every client asks: “Are we actually…
20 views
Daily Writeups
⤷ Title: HackSmarter BloodHound Guided Lab Challenge
════════════════════════
𐀪 Author: Psych0s1s
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 19:39:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #training #ethical_hacking
Medium
HackSmarter BloodHound Guided Lab Challenge
First off, as someone who has been doing ethical hacking/red teaming for a bit now professionally, it would seem odd that I was doing a lab…
37 views
Daily Writeups
⤷ Title: ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:59:23 +0530
════════════════════════
⌗ Tags: No_Tags
20 views
Daily Writeups
⤷ Title: ShinyHunters Leak 40GB of University of Nottingham Student Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:05:18 +0000
════════════════════════
⌗ Tags: #Data Breaches #Leaks #Security #Cyber Attack #Cyber Crime #Cybersecurity #Education #Privacy #ShinyHunters #United Kingdom #University of Nottingham
Hackread
ShinyHunters Leak 40GB of University of Nottingham Student Data
ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and staff records.
19 views
Daily Writeups
⤷ Title: “We Encrypt With AES-256” Is Not a Security Architecture
════════════════════════
𐀪 Author: Kalyan Dev
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:25:44 GMT
════════════════════════
⌗ Tags: #cryptocurrency #ae #bug_bounty #security #cybersecurity
Medium
“We Encrypt With AES-256” Is Not a Security Architecture
The questions nobody asks — and the attacks that follow when they don’t
9 views
Daily Writeups
⤷ Title: API Fuzzing for Security Testing: Part 2A: Breaking Authentication & Authorization
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:03:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #api #web_security #bug_bounty_tips #bug_bounty_writeup
Medium
API Fuzzing for Security Testing: Part 2A: Breaking Authentication & Authorization
JWT Attacks, IDOR/BOLA, Mass Assignment, and Authorization Abuse in Real-World APIs
10 views
Daily Writeups
⤷ Title: DLL Injection via Thread Hijacking Without Executable Memory
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:02:12 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #malware #infosec #cybersecurity
Medium
DLL Injection via Thread Hijacking Without Executable Memory
Welcome to this new Medium post. Today we cover a technique that combines thread hijacking with Return-Oriented Programming (ROP) to inject…
11 views
Daily Writeups
⤷ Title: The Hackers Who Hid Inside Your Router — and Nobody Noticed for a Year
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:00:23 GMT
════════════════════════
⌗ Tags: #technology #politics #linux #cybersecurity #hacking
Medium
The Hackers Who Hid Inside Your Router — and Nobody Noticed for a Year
Inside UNC3886’s Ghost Campaigns: A China-linked espionage group that quietly embedded itself into the backbone of the internet, gave its…
11 views