Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Cisco Unified CM CVE-2026–20230 SSRF Actively Exploited
════════════════════════
𐀪 Author: CyDhaal
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 12:39:22 GMT
════════════════════════
⌗ Tags: #cisco #cve #ssrf #vulnerability #cve2026_20230
Medium
Cisco Unified CM CVE-2026–20230 SSRF Actively Exploited
Cisco has confirmed active exploitation of CVE-2026–20230, a critical Server-Side Request Forgery (SSRF) vulnerability in Cisco Unified…
18 views
Daily Writeups
⤷ Title: Testing File Upload Vulnerability in web applications part-1!!!
════════════════════════
𐀪 Author: cyb3r_Rs
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:36:28 GMT
════════════════════════
⌗ Tags: #csrf #xss_vulnerability #ssrf #xxe #rce
Medium
Testing File Upload Vulnerability in web applications part-1!!!
Hii hunters Rs is here with one more informative & knowledgeable Article. I hope you find this helpful.
35 views
Daily Writeups
⤷ Title: How an Unsigned JWT Parameter Led to a $10,500 Full Account Takeover
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 12:26:00 GMT
════════════════════════
⌗ Tags: #security #bug_bounty_writeup #bug_bounty_tips #cybersecurity #pentesting
Medium
How an Unsigned JWT Parameter Led to a $10,500 Full Account Takeover
JSON Web Tokens (JWTs) are the unsung heroes of modern stateless authentication. They allow applications to verify user identity securely…
48 views
Daily Writeups
⤷ Title: Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 19:42:52 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:27:28 +0000
════════════════════════
⌗ Tags: #Security #AI #Artificial Intelligence #Cloud security #Cybersecurity #Upwind Security
Hackread
Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security
Upwind’s AI Sensor links endpoint activity with cloud context, helping teams track MCP connections, AI actions, identities and developer risk in one view today.
29 views
Daily Writeups
⤷ Title: I Thought I Was a Good Developer – Until This One Bug Cost Me Everything
════════════════════════
𐀪 Author: MohakPurwar
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:07:47 GMT
════════════════════════
⌗ Tags: #life #coding #bug_bounty
Medium
I Thought I Was a Good Developer – Until This One Bug Cost Me Everything
Photo by Safar Safarov on Unsplash
16 views
Daily Writeups
⤷ Title: Fortifying Your Android App in 2026: A Modern Kotlin Security Guide
════════════════════════
𐀪 Author: Halil Özel
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 14:59:16 GMT
════════════════════════
⌗ Tags: #application_security #android #android_development #information_security #kotlin
Medium
Fortifying Your Android App in 2026: A Modern Kotlin Security Guide
Security shouldn’t be an afterthought. Here is how to lock down your modern Android applications using Kotlin.
10 views
Daily Writeups
⤷ Title: Malware Development
════════════════════════
𐀪 Author: Infant Livingston
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 14:13:53 GMT
════════════════════════
⌗ Tags: #hacking #malware #cybersecurity #red_teaming #malware_development
Medium
Malware Development
XOR Encryption Explained for Malware Developers
8 views
Daily Writeups
⤷ Title: [GAME THEORY] The Scam Domain Was Never the Whole Operation
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 14:46:00 GMT
════════════════════════
⌗ Tags: #threat_intelligence #cybersecurity #fifa #infosec #world_cup
Medium
[GAME THEORY] The Scam Domain Was Never the Whole Operation
The scam domain is usually the part defenders can see first.
8 views
Daily Writeups
⤷ Title: Lab 5#: Exploiting server-side parameter pollution in a REST URL
════════════════════════
𐀪 Author: mohamed
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:31:50 GMT
════════════════════════
⌗ Tags: #portswigger_academy_labs #penetration_testing #api_security #web_security #sspp
Medium
Lab 5#: Exploiting server-side parameter pollution in a REST URL
Hello readers! I am Mohammad Reza, and today we will be discussing how to solve the fifth lab in the PortSwigger API Testing Academy…
7 views
Daily Writeups
⤷ Title: Internal — THM Write-up
════════════════════════
𐀪 Author: shortIntern
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 14:52:03 GMT
════════════════════════
⌗ Tags: #internal_tryhackme_room #penetration_testing #cybersecurity #tryhackme #ctf_writeup
Medium
Internal — THM Write-up
Internal is a Linux-based TryHackMe room that focuses on web enumeration, WordPress exploitation, credential discovery, pivoting into an…
7 views
Daily Writeups
⤷ Title: TryHackMe | WAF: Introduction | Walkthrough
════════════════════════
𐀪 Author: Ransom.Sezan
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:42:35 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #tryhackme_writeup
Medium
TryHackMe | WAF: Introduction | Walkthrough
TASK — 1: INTRODUCTION
11 views
Daily Writeups
⤷ Title: Operation Ghost Signal
════════════════════════
𐀪 Author: Jinx
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:36:33 GMT
════════════════════════
⌗ Tags: #open_source_intelligence #ctf #ethical_hacking #osint #cybersecurity
Medium
Operation Ghost Signal
Challenge Overview
22 views
Daily Writeups
⤷ Title: Lab 4#: Exploiting a mass assignment vulnerability
════════════════════════
𐀪 Author: mohamed
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:31:16 GMT
════════════════════════
⌗ Tags: #api_security #mass_assignment #bug_bounty_tips #owasp_top_10 #web_security
Medium
Lab 4#: Exploiting a mass assignment vulnerability
Hello readers! I am Mohammad Reza, and today we will be discussing how to solve the fourth lab in the PortSwigger API Testing Academy…
34 views
Daily Writeups
⤷ Title: Thm Room —Intro to Cross-Site Scripting
════════════════════════
𐀪 Author: Bsbharathkumarreddy
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 15:42:57 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #thm_room #tryhackme_walkthrough #cross_site_scripting #thm_writeup
Medium
Thm Room —Intro to Cross-Site Scripting
Task — 1:
35 views
Daily Writeups
⤷ Title: Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:11:58 +0000
════════════════════════
⌗ Tags: #Security #Gaming #Malware #Scams and Fraud #Crypto #Cyber Attack #Cyber Crime #Cybersecurity #Fraud #GTA 6 #Rockstar #Scam
Hackread
Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams
Cybercriminals are exploiting Grand Theft Auto VI hype by using fake early access websites to steal cryptocurrency and spread malware.
37 views
Daily Writeups
⤷ Title: The Hidden Bugs in Your LLM: Why AI Systems Fail in Ways You Never Expect
════════════════════════
𐀪 Author: EMTIAZ AHMED
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:50:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #mechine_learning #llm #software_development #hacking
Medium
The Hidden Bugs in Your LLM: Why AI Systems Fail in Ways You Never Expect
Large language models are powerful, but they come with a class of bugs unlike anything software engineers have dealt with before.
17 views
Daily Writeups
⤷ Title: WhatsApp Vulnerability CVE-2026–23863: What You Need to Know
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:06:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #artificial_intelligence #web_development #hacking
Medium
WhatsApp Vulnerability CVE-2026–23863: What You Need to Know 🔥
Understanding the WhatsApp for Windows Attachment Spoofing Vulnerability
12 views
Daily Writeups
⤷ Title: How a Custom Google Dork Led Me to RCE in a Job Portal’s Resume Upload
════════════════════════
𐀪 Author: 0B1To_XucH!h4
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 16:49:38 GMT
════════════════════════
⌗ Tags: #red_team #bug_bounty
Medium
How a Custom Google Dork Led Me to RCE in a Job Portal’s Resume Upload
The $200 bounty that took six months to arrive, and why I almost gave up waiting 💀
16 views
Daily Writeups
⤷ Title: PortSwigger Lab Walkthrough: Exploiting a WHERE Clause to Retrieve Hidden Data (SQL Injection)
════════════════════════
𐀪 Author: Chetan Patil
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 16:30:10 GMT
════════════════════════
⌗ Tags: #infosec #sql_injection #cybersecurity #web_security #portswigger_lab
Medium
PortSwigger Lab Walkthrough: Exploiting a WHERE Clause to Retrieve Hidden Data (SQL Injection)
QUICK INFO BLOCK
13 views
Daily Writeups
⤷ Title: I Turned It On. Then I Watched What It Sent to China.
════════════════════════
𐀪 Author: C. Oscar Lawshea
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:01:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #network_security #cybersecurity #privacy #iot_security
Medium
I Turned It On. Then I Watched What It Sent to China.
Yoosee YS-HPC01 Pentest Series — Part 2: Live Traffic, Open Ports, and 423 Requests to Beijing
15 views