Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The MFA Bypass That Wasn’t an MFA Problem: A Lesson in Broken API Authorization
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 01:29:56 GMT
════════════════════════
⌗ Tags: #mfa_bypass #bug_bounty_writeup #security_research #hacking #bug_bounty
Medium
The MFA Bypass That Wasn’t an MFA Problem: A Lesson in Broken API Authorization
A bug bounty story about frontend trust, missing backend enforcement, and why attackers never use your UI.
15 views
Daily Writeups
⤷ Title: I Found a Bug That Looks Harmless But Can Still Get You Paid
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 00:03:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #html #medium #bug_bounty
Medium
I Found a Bug That Looks Harmless But Can Still Get You Paid
Here is everything I know about HTML Injection, how I test for it, how people bypass filters, and what it actually scores on CVSS
15 views
Daily Writeups
⤷ Title: 2FA Bypass: The Complete Guide to Breaking Two-Factor Authentication (And How to Fix It)
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 23:59:08 GMT
════════════════════════
⌗ Tags: #medium #bug_bounty #cybersecurity #pentesting #ethical_hacking
Medium
2FA Bypass: The Complete Guide to Breaking Two-Factor Authentication (And How to Fix It)
Why I Started Caring About 2FA Bugs
14 views
Daily Writeups
⤷ Title: The Problem With Signature-Based WAFs (And How We’re Solving It Differently)
════════════════════════
𐀪 Author: Gladioswaf
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 02:00:55 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #web_security #machine_learning #application_security
Medium
The Problem With Signature-Based WAFs (And How We’re Solving It Differently)
Traditional WAFs are useful, but many still depend heavily on rules, signatures, and constant tuning. GladiosWAF takes a different approach…
16 views
Daily Writeups
⤷ Title: cyber talents Join Team web CTF write up and walkthrough
════════════════════════
𐀪 Author: 0xNemr
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 00:30:43 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #penetration_testing #hacking #ctf_walkthrough
Medium
cyber talents Join Team web CTF write up and walkthrough
hi hackers
26 views
Daily Writeups
⤷ Title: FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 02:06:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #FortiBleed #FortiGate #Fortinet #Fortinet credential leak #Fortinet firewalls compromised #Fortinet VPN breach #SOCRadar
Daily CyberSecurity
FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist
The FortiBleed campaign exposed working logins for 30,791 Fortinet firewalls across 194 countries. This Fortinet credential leak hits every sector.
36 views
Daily Writeups
⤷ Title: Building a Practical CTI RAG Assistant: An AI-Powered Threat Intelligence Workflow
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 02:47:25 GMT
════════════════════════
⌗ Tags: #hacking #threat_intelligence #bug_bounty #ai #cybersecurity
Medium
Building a Practical CTI RAG Assistant: An AI-Powered Threat Intelligence Workflow
Threat intelligence teams collect huge amounts of data every day — CVE feeds, malware reports, IOC feeds, vendor research, and incident…
28 views
Daily Writeups
⤷ Title: Authentication Bypass via Insecure redirect_url Parameter Leading to Account Takeover
════════════════════════
𐀪 Author: Priyanshu parmar
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 02:30:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup #bug_bounty #infosec #bug_bounty_tips
15 views
Daily Writeups
⤷ Title: TryHackMe Love Letter Locker Challenge Write-up
════════════════════════
𐀪 Author: Benedict
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 03:50:20 GMT
════════════════════════
⌗ Tags: #tryhackme #hacking #tryhackme_walkthrough
Medium
TryHackMe Love Letter Locker Challenge Write-up
This is a write-up of how I solved the Love Letter Locker challenge on TryHackMe.
17 views
Daily Writeups
⤷ Title: Backdoor.Turn: DragonForce Ransomware Just Made Your Microsoft Teams Logs Useless (The Ransomware…
════════════════════════
𐀪 Author: Ali Mansoor
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 02:27:59 GMT
════════════════════════
⌗ Tags: #microsoft #infosec #cybersecurity #threat_intelligence #ransomware
Medium
Backdoor.Turn: DragonForce Ransomware Just Made Your Microsoft Teams Logs Useless (The Ransomware…
DragonForce ransomware spent two months inside a major US services company in late 2025. Network defenders watching for suspicious traffic…
19 views
Daily Writeups
⤷ Title: Building a Zero-Trust Healthcare API with Federated XGBoost: What I Learned Securing IoMT Systems
════════════════════════
𐀪 Author: Neha Manoj
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 03:57:53 GMT
════════════════════════
⌗ Tags: #iot #healthcare_technology #zero_trust #ai_in_cybersecurity #api_security
Medium
Building a Zero-Trust Healthcare API with Federated XGBoost: What I Learned Securing IoMT Systems
When I started working on this project, I kept coming back to the same uncomfortable fact about healthcare APIs. The devices and…
26 views
Daily Writeups
⤷ Title: HSTS and Cross-Domain Policy Misconfigurations
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 05:42:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty_tips #information_security #bug_bounty
Medium
HSTS and Cross-Domain Policy Misconfigurations
Small Configuration Mistakes That Can Create Big Security Risks
24 views
Daily Writeups
⤷ Title: Moved to https://cybernetxe.xo.je
════════════════════════
𐀪 Author: Zuhaib Hassan
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 05:05:06 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity
Medium
Moved to https://cybernetxe.xo.je
“Moved to https://cybernetxe.xo.je” is published by Zuhaib Hassan.
23 views
Daily Writeups
⤷ Title: thejavasea.me leaks aio-416 Explained: Cybersecurity Risks, Phishing Threats & Safety Guide 2026
════════════════════════
𐀪 Author: Sevangeline
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 04:14:22 GMT
════════════════════════
⌗ Tags: #data_privacy #cyber_security_awareness #infosec #hacking #online_safety
Medium
thejavasea.me leaks aio-416 Explained: Cybersecurity Risks, Phishing Threats & Safety Guide 2026
The keyword thejavasea.me leaks aio-416 has recently gained attention across search engines and online platforms, raising concerns about…
27 views
Daily Writeups
⤷ Title: Cybersecurity Theory Basics
════════════════════════
𐀪 Author: Akhil Thakur
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 05:09:36 GMT
════════════════════════
⌗ Tags: #beginner #cybersecurity #basics #ethical_hacking #theory
Medium
Cybersecurity Theory Basics
OSI and TCP/IP Model
25 views
Daily Writeups
⤷ Title: Apple Intelligence Developer Tools Revealed at WWDC 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 07:50:53 +0000
════════════════════════
⌗ Tags: #Technology #Apple Intelligence #Core AI #MLX Framework #WWDC 2026 #Xcode 27
Daily CyberSecurity
Apple Intelligence Developer Tools Revealed at WWDC 2026
Discover the new Apple Intelligence developer tools from WWDC 2026. Explore how Xcode 27, App Intents, and MLX frameworks empower next-gen AI applications.
23 views
Daily Writeups
⤷ Title: WhatsApp Tests View Once Text Messages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 07:47:38 +0000
════════════════════════
⌗ Tags: #Technology #Meta #Privacy Features #View Once #WhatsApp Update
Daily CyberSecurity
WhatsApp Tests View Once Text Messages
WhatsApp is testing View Once text messages to enhance privacy. Discover how this new feature blocks screenshots and protects your sensitive information.
20 views
Daily Writeups
⤷ Title: OpenAI Joins Rust Foundation with $600K Donation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 07:43:42 +0000
════════════════════════
⌗ Tags: #Technology #open_source #OpenAI #Rust Foundation #Rust Programming
Daily CyberSecurity
OpenAI Joins Rust Foundation with $600K Donation
OpenAI joins the Rust Foundation as a Platinum Member, donating $600,000 to bolster open-source infrastructure and support ecosystem maintainers.
13 views
Daily Writeups
⤷ Title: Apple Price Increase Looms Amid AI Memory Crisis
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 07:35:40 +0000
════════════════════════
⌗ Tags: #Technology #Apple #artificial intelligence #iPhone 18 #Tech News #Tim Cook
Daily CyberSecurity
Apple Price Increase Looms Amid AI Memory Crisis
An unavoidable Apple price increase is coming soon. Discover why the AI boom and soaring memory costs will make the iPhone 18 and new Macs more expensive.
9 views
Daily Writeups
⤷ Title: Khmer Shadow Espionage Campaign Targets Cambodian Government
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 07:30:12 +0000
════════════════════════
⌗ Tags: #Malware #Acronis #APT #Cambodia #DLL Sideloading #Espionage #Havoc Demon #Khmer Shadow #NIGHTFORGE
Daily CyberSecurity
Khmer Shadow Espionage Campaign Targets Cambodian Government
Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.
17 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #47: Account Takeover 101 — How to Steal Everyone’s Account (Legally)”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 06:47:27 GMT
════════════════════════
⌗ Tags: #technology #penetration_testing #hacking #cybersecurity #bug_bounty
Medium
“Bug Bounty Bootcamp #47: Account Takeover 101 — How to Steal Everyone’s Account (Legally)”
You don’t need to be a hacker in a hoodie. Just a missing IDOR, a leaky invite link, or a mass-assignable “role” field — and suddenly…
15 views