Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Linux Privilege Escalation via Docker Group: Mount, Socket Abuse and Container Escape
════════════════════════
𐀪 Author: Isha Sangpal
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 16:41:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #betigetin #security #ethical_hacking #penetration_testing
Medium
Linux Privilege Escalation via Docker Group: Mount, Socket Abuse and Container Escape
If your user is in the docker group, you already have root. Here is why, and how attackers exploit it across multiple scenarios.
41 views
Daily Writeups
⤷ Title: Beyond Google Dorks: A Modern Methodology for Hunting Exposed Google Workspace Assets in Bug Bounty…
════════════════════════
𐀪 Author: Aman Bhuiyan
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:25:59 GMT
════════════════════════
⌗ Tags: #reconnaissance #hacking #bug_bounty #bug_hunting #ethical_hacking
Medium
Beyond Google Dorks: A Modern Methodology for Hunting Exposed Google Workspace Assets in Bug Bounty Programs
When people think about bug bounty reconnaissance, they often focus on the obvious targets: the company’s website, subdomains, APIs, mobile…
41 views
Daily Writeups
⤷ Title: Clickjacking Vulnerability
════════════════════════
𐀪 Author: Sarroumohamed
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:48:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #bug_bounty #clickjacking #web_security
Medium
Clickjacking Vulnerability
What is Clickjacking?
21 views
Daily Writeups
⤷ Title: Stored XSS into anchor href attribute with double quotes HTML-encoded | PortSwigger | Shiv Kumar |…
════════════════════════
𐀪 Author: Shiv Kumar
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:11:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #owasp_top_10 #penetration_testing #application_security
Medium
Stored XSS into anchor href attribute with double quotes HTML-encoded | PortSwigger | Shiv Kumar | OWASP TOP 10 | Application Security…
Portswigger Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded
24 views
Daily Writeups
⤷ Title: How I Found an Unauthenticated IDOR in a Government College Website — A Responsible Disclosure…
════════════════════════
𐀪 Author: Sahal
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 17:51:20 GMT
════════════════════════
⌗ Tags: #idor #bug_hunting #cybersecurity #beginner #bug_bounty
Medium
How I Found an Unauthenticated IDOR in a Government College Website — A Responsible Disclosure Case…
Introduction
25 views
Daily Writeups
⤷ Title: KHAOS C2: Building a Fully Custom Command and Control from Scratch
════════════════════════
𐀪 Author: Ilyes AZIZ
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:34:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #malware #programming #hacking #red_team
Medium
KHAOS C2: Building a Fully Custom Command and Control from Scratch
Every red team engagement starts the same way. You set up your infrastructure, stage your payload, and within minutes Defender flags it…
15 views
Daily Writeups
⤷ Title: Building a Windows Defender Disable Shellcode with Stardust
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:50:35 GMT
════════════════════════
⌗ Tags: #malware #pentesting #cybersecurity #hacking #infosec
Medium
Building a Windows Defender Disable Shellcode with Stardust
In the previous posts of this series, we introduced the Stardust shellcode generator template and built a practical reverse shell payload…
16 views
Daily Writeups
⤷ Title: TryHackMe — Recruit
════════════════════════
𐀪 Author: Никита Ивашенюта
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:55:04 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #tryhackme_writeup
Medium
TryHackMe — Recruit
Platform: TryHackMe Difficulty: Medium Category: Web Exploitation Techniques: SSRF, LFI via SSRF, SQL Injection (UNION-based), Source…
16 views
Daily Writeups
⤷ Title: TryHackMe — Networking Core Protocols | Cyber Security 101 | Walkthrough
════════════════════════
𐀪 Author: Twilight
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:08:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #tryhackme
Medium
TryHackMe — Networking Core Protocols | Cyber Security 101 | Walkthrough
Hey everyone! TryHackMe just announced the new Cyber Security 101 learning path, and there are tons of giveaways this time! This article…
16 views
Daily Writeups
⤷ Title: RootMe — TryHackMe Walkthrough | My Learning Journey
════════════════════════
𐀪 Author: Pranshu Jha
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:03:59 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #root_me
Medium
RootMe — TryHackMe Walkthrough | My Learning Journey
Introduction
13 views
Daily Writeups
⤷ Title: Padding Oracle Attack: Forging Encrypted Share Tokens in OopsSec Store
════════════════════════
𐀪 Author: OopsSec Store
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:01:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #capture_the_flag #cryptography #web_security #ethical_hacking
Medium
Padding Oracle Attack: Forging Encrypted Share Tokens in OopsSec Store
The server told you too much, and that was enough to win.
14 views
Daily Writeups
⤷ Title: PortSwigger Lab Write-Up: DOM XSS in document.write
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:50:35 GMT
════════════════════════
⌗ Tags: #education #web_development #ethical_hacking #cybersecurity #security
Medium
PortSwigger Lab Write-Up: DOM XSS in document.write
DOM-based Cross-Site Scripting (DOM XSS) vulnerabilities occur when an application contains client-side JavaScript that processes data from…
28 views
Daily Writeups
⤷ Title: I Just Cleared the CRTA Exam — Here’s Everything I Wish Someone Had Told Me
════════════════════════
𐀪 Author: Kalash Kundaliya
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 18:21:15 GMT
════════════════════════
⌗ Tags: #red_team #active_directory #crta #ethical_hacking #career_certification
Medium
I Just Cleared the CRTA Exam — Here’s Everything I Wish Someone Had Told Me
My honest, unfiltered journey through one of the most intense red team certifications out there
26 views
Daily Writeups
⤷ Title: SQL Injection & Web Fuzzing with SQLMap and FFUF: A Practical Ethical Hacking Guide
════════════════════════
𐀪 Author: A. AntorCSE404
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 20:00:50 GMT
════════════════════════
⌗ Tags: #tryhackme #sql_injection #cybersecurity
Medium
SQL Injection & Web Fuzzing with SQLMap and FFUF: A Practical Ethical Hacking Guide
Hey everyone! 👋 Today we will learn about SQL injection and fuzzing. For the whole session, we will use the metasploitable machine. We…
34 views
Daily Writeups
⤷ Title: SQL injection to Shell — PentesterLab
════════════════════════
𐀪 Author: ColdLogic7
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:22:17 GMT
════════════════════════
⌗ Tags: #sql_injection #ctf_writeup #sql #pentester_labs #web_for_pentester
Medium
SQL injection to Shell — PentesterLab
Every cybersecurity enthusiast remembers their first time transitioning from curated academy labs to the wild, unpredictable world of home…
41 views
Daily Writeups
⤷ Title: السلام عليكم
════════════════════════
𐀪 Author: Abdlalicc
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 21:37:46 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bugs #bug_hunting #bug_bounty #bug_bounty_writeup
Medium
السلام عليكم 👋
Critical BAC tips
30 views
Daily Writeups
⤷ Title: Privacy Became a Luxury While Nobody Was Looking
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 21:34:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #information_technology #privacy #security
Medium
Privacy Became a Luxury While Nobody Was Looking
Stop accepting defaults. Start building walls.
23 views
Daily Writeups
⤷ Title: Snowy ARMageddon (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 20:17:38 GMT
════════════════════════
⌗ Tags: #hacking #yeti #tryhackme #cybersecurity #privilege_escalation
Medium
Snowy ARMageddon (THM) Tryhackme Hard Challenge
Description : Assist the Yeti in breaching the cyber police perimeter!
24 views
Daily Writeups
⤷ Title: AndroidBreach Lab
════════════════════════
𐀪 Author: Aaron Davidson
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 19:52:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberdefender #dfir #infosec
Medium
AndroidBreach Lab
CyberDefenders — AndroidBreach Lab
21 views
Daily Writeups
⤷ Title: Gophish — with a gmail account
════════════════════════
𐀪 Author: Zen
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 20:44:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #blue_team #gophish #cybersecurity #phishing
Medium
Gophish — with a gmail account
I completed a Gophish lab with an instance in the cloud and I wanted to try it now with my gmail account.
12 views
Daily Writeups
⤷ Title: Local Privilege Escalation in a Linux environment
════════════════════════
𐀪 Author: W4lk3r
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 20:42:07 GMT
════════════════════════
⌗ Tags: #privilege_escalation #hackviser #penetration_testing
Medium
Local Privilege Escalation in a Linux environment
My recent lab missions on Hackviser has been nothing but pure proudness and joy and this time it has been even more because I have learned…
15 views