Daily Writeups
@Daily_Writeups
3.93K subscribers
4 photos
135K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.93K subscribers
Daily Writeups
⤷ Title: bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sat, 09 May 2026 12:04:24 GMT
════════════════════════
⌗ Tags: #injection #owasp #html_injection #bwapp #bug_bounty
Medium
bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
HTML Injection is one of the most fundamental web application vulnerabilities and often serves as a stepping stone to more advanced attacks…
16 views
Daily Writeups
⤷ Title: HTML Should Have Embedded Markdown 30 Years Ago
════════════════════════
𐀪 Author: Outermostkt
════════════════════════
ⴵ Time: Sun, 17 May 2026 02:08:54 GMT
════════════════════════
⌗ Tags: #thariq #ai #xs #html #markdown
Medium
HTML Should Have Embedded Markdown 30 Years Ago
As you may know, there’s been a lot of buzz in the AI community lately about shifting back from Markdown to HTML. For instance, in articles…
21 views
Daily Writeups
⤷ Title: The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:00:53 GMT
════════════════════════
⌗ Tags: #html_injection #web_security #infosec #coffinxp #bug_bounty
Medium
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ A short recon story about a delayed HTML injection, a surprising phishing vector, and why every output channel …
6 views
Daily Writeups
⤷ Title: Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:04:27 +0000
════════════════════════
⌗ Tags: #Malware #Amatera Info Harvester #ClickFix Social Engineering LummaStealer #ClipBanker Crypto Stealer #CountLoader Staging Framework #Emmenhtal Loader #HTML Application HTA Payload #Living off the Land Binaries #MSHTA Weaponization Malware Delivery #mshta.exe Windows Binary #PurpleFox Rootkit Lineage
Penetration Testing Tools
Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
Threat actors are increasingly weaponizing MSHTA, a legacy Windows utility, as a highly efficient conduit to execute malicious
15 views
Daily Writeups
⤷ Title: HTML Injection in Outbound Emails: An Overlooked Security Risk
════════════════════════
𐀪 Author: vibhuti bhatt
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 12:26:37 GMT
════════════════════════
⌗ Tags: #html_injection #vulnerability #application_security #pentesting #injection_in_email
Medium
HTML Injection in Outbound Emails: An Overlooked Security Risk
Introduction
19 views
Daily Writeups
⤷ Title: Telegram Bots Receive Rich HTML and Markdown Formatting Options
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 08:44:45 +0000
════════════════════════
⌗ Tags: #Technology #bot development #HTML formatting #Markdown #Rich Text #Telegram Bots
Daily CyberSecurity
Telegram Bots Receive Rich HTML and Markdown Formatting Options
Pavel Durov recently announced expanded capabilities for all automated systems on the platform. Specifically, Telegram now supports intricate HTML and Markdown structures. Consequently, bots can g…
20 views
Daily Writeups
⤷ Title: I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
════════════════════════
𐀪 Author: Prashant Raj
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:46:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_hunting #html_injection #technology
Medium
I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
TryHackMe — How Websites Work
12 views
Daily Writeups
⤷ Title: I Found a Bug That Looks Harmless But Can Still Get You Paid
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 00:03:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #html #medium #bug_bounty
Medium
I Found a Bug That Looks Harmless But Can Still Get You Paid
Here is everything I know about HTML Injection, how I test for it, how people bypass filters, and what it actually scores on CVSS
16 views
Daily Writeups
⤷ Title: bWAPP HTML Injection — Reflected (URL) and Stored (Blog)
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 14:03:38 GMT
════════════════════════
⌗ Tags: #injection #html_injection #owasp #bug_bounty #bwapp
Medium
bWAPP HTML Injection — Reflected (URL) and Stored (Blog)
Web applications heavily rely on user input, but improper handling of this input often introduces security vulnerabilities. One such…
10 views
Daily Writeups
⤷ Title: CSRF: When Your Browser Snitches Behind Your Back
════════════════════════
𐀪 Author: Ziyad
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 01:34:55 GMT
════════════════════════
⌗ Tags: #web_development #html #csrf #cybersecurity #penetration_testing
Medium
CSRF: When Your Browser Snitches Behind Your Back
What are CSRFs ?
27 views
Daily Writeups
⤷ Title: From a “Self-XSS” to a Convincing UI Spoof: A Bug Bounty Story That Ended as a Duplicate.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 19:47:30 GMT
════════════════════════
⌗ Tags: #phishing #html #reflected_xss #self_xss #bug_bounty
Medium
From a “Self-XSS” to a Convincing UI Spoof: A Bug Bounty Story That Ended as a Duplicate.
There’s a special kind of pain in bug bounty. Not getting an Out of Scope. Not getting an informative.
14 views
Daily Writeups
⤷ Title: GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:15:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_13320 #CVE_2026_6896 #DevSecOps #GitLab EE #GitLab patch release #HTML Injection
Daily CyberSecurity
GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
TL;DR This GitLab patch release, shipped on July 8, 2026, covers versions 19.1.2, 19.0.4, and 18.11.7. The update fixes eight security flaws across Community and Enterprise Edition. The most sever…
22 views
Daily Writeups
⤷ Title: How I Turned an “Informative” HTML Injection into My First Paid Bounty
════════════════════════
𐀪 Author: Muhammadmaftuhk
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:57:41 GMT
════════════════════════
⌗ Tags: #web_security #html_injection #bug_bounty #bug_bounty_writeup #cybersecurity
Medium
How I Turned an “Informative” HTML Injection into My First Paid Bounty
TL;DR: HTML Injection is often marked as Informative or N/A by triagers. However, by demonstrating how a hidden CSS overlay bypassed the…
27 views
Daily Writeups
⤷ Title: DCRat Campaign Uses SVG HTML Smuggling to Deliver DarkCrystal RAT
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 01:01:09 +0000
════════════════════════
⌗ Tags: #Malware #DarkCrystal RAT #DCRat #DLL Sideloading #Html Smuggling #phishing #Process Hollowing #Trellix
Daily CyberSecurity
DCRat Campaign Uses SVG HTML Smuggling to Deliver DarkCrystal RAT
At a Glance Malware family DCRat (DarkCrystal RAT) Threat actor Not attributed by Trellix; DCRat is a malware-as-a-service tool Target Users lured with a Colombian judicial theme Delivery vector P…
16 views