Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: TryHackMe: Operation Coldstart Walkthrough — From SSRF to Tar Wildcard Injection
════════════════════════
𐀪 Author: Puspendu sana
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:44:46 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme #operation_coldstart
Medium
TryHackMe: Operation Coldstart Walkthrough — From SSRF to Tar Wildcard Injection
Introduction
9 views
Daily Writeups
⤷ Title: TryHackMe Pre Security (SEC0) & Cyber Security 101 (SEC1) — Exam Preparation & Experience
════════════════════════
𐀪 Author: N3NU
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #ethical_hacking #information_security #career_development #cybersecurity
Medium
TryHackMe Pre Security (SEC0) & Cyber Security 101 (SEC1) — Exam Preparation & Experience
Table of Contents
12 views
Daily Writeups
⤷ Title: The Guide to Hiring an Ethical Hacker
════════════════════════
𐀪 Author: Darksynthhacker
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:55:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
The Guide to Hiring an Ethical Hacker
In today’s digital age, cybersecurity has become a paramount concern for individuals and businesses alike. With the increasing number of…
18 views
Daily Writeups
⤷ Title: Finding and Exploiting an unused API endpoint
════════════════════════
𐀪 Author: Dalila
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #rest_api_security #api_security #owasp_api #owasp_api_security_top_10 #api_endpoint_monitoring
Medium
Finding and Exploiting an unused API endpoint
This lab demonstrates how an unused API endpoint can be exploited. By analyzing HTTP requests and taking advantage of gaps revealed in…
35 views
Daily Writeups
⤷ Title: The Forgotten Backdoor: Why IDOR Remains the Silent Killer of Web Security
════════════════════════
𐀪 Author: Cinchana S
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:59:21 GMT
════════════════════════
⌗ Tags: #owasp #web_security #cybersecurity #api_security #bug_bounty
Medium
The Forgotten Backdoor: Why IDOR Remains the Silent Killer of Web Security
“The most dangerous vulnerabilities aren’t always the flashiest. Sometimes, all it takes is changing one number in a URL.”
51 views
Daily Writeups
⤷ Title: 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 19:59:46 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Texas Parks and Wildlife Data Breach Affects Over 3M License Customers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 15:20:13 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Cyber Attack #Cybersecurity #data breach #Privacy #security #Texas #Vulnerability
Hackread
Texas Parks and Wildlife Data Breach Affects Over 3M License Customers
Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver's licences and passport numbers.
31 views
Daily Writeups
⤷ Title: Threat Hunting Beyond Alerts: Finding the Activity Detection Misses
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:20:08 +0000
════════════════════════
⌗ Tags: #Security #ANY RUN #Cybersecurity #Malware #Phishing #Sandbox #Threat Analysis #Threat Detection #Threat Hunting #Threat Intelligence #Threat Mitigation
Hackread
Threat Hunting Beyond Alerts: Finding the Activity Detection Misses
Learn how threat hunting uses behavioral context, malware analysis and threat intelligence to find attacks that alerts and detection rules miss.
13 views
Daily Writeups
⤷ Title: SOP vs CORS vs Preflight vs SameSite Cookies — A Guide for Bug Bounty Hunters
════════════════════════
𐀪 Author: Md Maruf Hosan (0xMaruf)
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:21:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #cors #browser_security #cybersecurity
Medium
SOP vs CORS vs Preflight vs SameSite Cookies — A Guide for Bug Bounty Hunters
Hey this is Maruf Hosan aka 0xmaruf . lets jump on our topic
10 views
Daily Writeups
⤷ Title: Introduction to Heap Overflow: Theory and Practice [part 1]
════════════════════════
𐀪 Author: Kerkroups
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:08:17 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #cybersecurity #binary_security
Medium
Introduction to Heap Overflow: Theory and Practice [part 1]
SOME THEORY
11 views
Daily Writeups
⤷ Title: Remote Code Execution via Custom JS Function in Flowise
════════════════════════
𐀪 Author: Ajith Prabhu
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:38:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #code_review #remote_code_execution #application_security
Medium
Remote Code Execution via Custom JS Function in Flowise
During a security review of Flowise v3.1.1, I identified a path that allows authenticated users capable of creating chatflows to achieve…
10 views
Daily Writeups
⤷ Title: HackTheBox — Administrator (Medium)
════════════════════════
𐀪 Author: Porkballs
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:57:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf #hacking #information_security #cybersecurity
Medium
HackTheBox — Administrator (Medium)
📋 This writeup is part of the Lainkusanagi OSCP Like List — a curated collection of machines recommended for OSCP preparation.
10 views
Daily Writeups
⤷ Title: The Most Dangerous Part of Google’s AI Zero-Day Isn’t the AI
════════════════════════
𐀪 Author: Len Noe
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:06:25 GMT
════════════════════════
⌗ Tags: #identity_security #hacking #cybersecurity #zero_trust #artificial_intelligence
Medium
The Most Dangerous Part of Google’s AI Zero-Day Isn’t the AI
Google’s latest discovery isn’t a story about artificial intelligence. It’s a story about trust, identity, and the assumptions attackers…
13 views
Daily Writeups
⤷ Title: TryHackMe — Python: Simple Demo
════════════════════════
𐀪 Author: Ufuk Yaman
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:40:51 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #python3 #python_programming #python
Medium
TryHackMe — Python: Simple Demo
Özet
13 views
Daily Writeups
⤷ Title: CMesS — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:20:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_writeup #ctf #tryhackme_walkthrough
Medium
CMesS — TryHackMe WriteUp with Flags
CMesS — TryHackMe WriteUp with Flags Date: 05/06/2026 Room Link: https://tryhackme.com/room/cmess My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this room, I chained …
26 views
Daily Writeups
⤷ Title: QA at X have their task cut out for them
════════════════════════
𐀪 Author: Ankit Kalluraya(Keith,Kit)
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:21:52 GMT
════════════════════════
⌗ Tags: #twitter #qa #twitter_marketing #sdet #xs
Medium
QA at X have their task cut out for them
X has had a week that its users will not forget. Not because of some viral moment or a trending topic, but because the platform itself kept…
40 views
Daily Writeups
⤷ Title: Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 21:43:28 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 17:57:36 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Apple #Beats Studio Buds #Cybersecurity #security #Spying #Vulnerability
Hackread
Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users
Apple has released a security update to patch a Beats Studio Buds flaw that let nearby hackers listen to conversations through the microphone.
27 views
Daily Writeups
⤷ Title: FBI Warns of Traffic Distribution Systems in Cyber Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 16:08:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2024_28000 #FBI Warning #phishing #Traffic Distribution Systems
Daily CyberSecurity
FBI Warns of Traffic Distribution Systems in Cyber Attacks
The FBI warns that cyber criminals increasingly use traffic distribution systems to redirect users to malicious websites, phishing pages, and malware scams.
16 views
Daily Writeups
⤷ Title: Advanced SQLMap Techniques & WAF Bypass: A Deep Dive for Security Professionals
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 17:53:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_technology #sql_injection #cybersecurity #bug_bounty
Medium
Advanced SQLMap Techniques & WAF Bypass: A Deep Dive for Security Professionals
A comprehensive guide to leveraging SQLMap’s advanced capabilities in authorized penetration testing engagements
13 views
Daily Writeups
⤷ Title: Bug Reporting Tool Every Developer Wished Existed
════════════════════════
𐀪 Author: Tripathi Aditya Prakash
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 17:06:07 GMT
════════════════════════
⌗ Tags: #software_development #bug_bounty #ai #data_science #developer_tools
Medium
Bug Reporting Tool Every Developer Wished Existed
No more “works on my machine.” No more half-baked tickets. Just complete context, automatically.
14 views