Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 12:45:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49415 #CVE_2026_49418 #CVE_2026_49419 #freebsd #kernel vulnerability #privilege escalation #use after free
Daily CyberSecurity
FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation
TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in the kernel. Each flaw lets an unprivileged local user aim for root, and two open …
12 views
Daily Writeups
⤷ Title: Kafka Authentication Bypass in the OAUTHBEARER JWT Path
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 12:01:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kafka #Authentication Bypass #JWT #OAUTHBEARER #oss_security #SASL
Daily CyberSecurity
Kafka Authentication Bypass in the OAUTHBEARER JWT Path
TL;DR A researcher disclosed a Kafka authentication bypass in the OAUTHBEARER login path. It affects Apache Kafka 4.0.0 through 4.0.x. An attacker can replay a captured JWT long after it expires. …
22 views
Daily Writeups
⤷ Title: INSTAGRAM Account Takeover 0-click Username and email Collision in Password Recover $130k+ bounty
════════════════════════
𐀪 Author: Ali
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:19:50 GMT
════════════════════════
⌗ Tags: #security #bugs #instagram #meta #bug_bounty
Medium
INSTAGRAM Account Takeover 0-click Username and email Collision in Password Recover
Hello everyone,
12 views
Daily Writeups
⤷ Title: Understanding window.postMessage(): How Browsers Safely Communicate Across Origins (PART -2)
════════════════════════
𐀪 Author: BALAJI
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:06:39 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #bug_hunting #bug_bounty #bug_bounty_writeup
Medium
Understanding window.postMessage(): How Browsers Safely Communicate Across Origins (PART -2)
If you’ve ever used Google Sign-In, Stripe Checkout, embedded YouTube videos, or OAuth authentication, you’ve already relied on…
10 views
Daily Writeups
⤷ Title: is it possible to hire a hacker ?
════════════════════════
𐀪 Author: Bradley Woods
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:22:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #cheating #hacking #infidelity #hacker
Medium
is it possible to hire a hacker ?
yes it’s possible to hire a hacker through research online or through referral from friends who have worked with a trusted hacker before. I…
14 views
Daily Writeups
⤷ Title: Outgunned With Better Aim: How AI-Assisted Defense Beat an AI-Coordinated Attack
════════════════════════
𐀪 Author: Alexius McMullin
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 19:47:19 GMT
════════════════════════
⌗ Tags: #infosec #technology #cybersecurity #incident_response #artificial_intelligence
Medium
Outgunned With Better Aim: How AI-Assisted Defense Beat an AI-Coordinated Attack
This piece originally appeared on Alexius On Tech. Canonical link set accordingly.
9 views
Daily Writeups
⤷ Title: A Neocypherpunk Trailblazer
════════════════════════
𐀪 Author: CypherBlush™
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:57:20 GMT
════════════════════════
⌗ Tags: #women_in_tech #infosec #cybersecurity #feminism #female_founders
Medium
A Neocypherpunk Trailblazer
Refactoring the Technical Debt of Gender Inequity
9 views
Daily Writeups
⤷ Title: How I Chained an Open Redirect into Email Leak and Got $1,337 from Google
════════════════════════
𐀪 Author: xlsizebruh
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:10:46 GMT
════════════════════════
⌗ Tags: #bug_bounty_google #infosec #cybersecurity #websecurity_testing #bug_bounty_writeup
Medium
How I Chained an Open Redirect into Email Leak and Got $1,337 from Google
Who Am I?
13 views
Daily Writeups
⤷ Title: Image Metadata: The Silent Intelligence Source You’re Ignoring
════════════════════════
𐀪 Author: freerave
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:09:54 GMT
════════════════════════
⌗ Tags: #infosec #python #privacy #exiftool #metadata
Medium
Image Metadata: The Silent Intelligence Source You’re Ignoring
How EXIF data enables adversary tracking — and how DotScramble fights back
19 views
Daily Writeups
⤷ Title: Corridor CTF THM
════════════════════════
𐀪 Author: ZODiAK
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:36:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf_writeup #hacker #tryhackme #cybersecurity
Medium
Corridor CTF THM
Hi HACKERRRRRRRRRssssssss
today i will share with you Corridor CTF on platform TryHackMe
26 views
Daily Writeups
⤷ Title: TryHackMe | Threat Hunting: Introduction | Write-up
════════════════════════
𐀪 Author: Ransom.Sezan
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:34:57 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #thm_writeup #threat_hunting #tryhackme #tryhackme_walkthrough
Medium
TryHackMe | Threat Hunting: Introduction | Write-up
TASK-1: Introduction
25 views
Daily Writeups
⤷ Title: Baby HTB writeup
════════════════════════
𐀪 Author: Joseph "n3m0” KANKO
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 17:54:16 GMT
════════════════════════
⌗ Tags: #ads #active_directory #ctf_writeup #hackthebox_writeup
Medium
Baby HTB writeup
Hello everyone and welcome to this new write-up for this Active Directory hacking challenge.
31 views
Daily Writeups
⤷ Title: Install Burp Suite Professional 2026 (Linux )| By Dharavath Nagaraju
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 19:06:09 GMT
════════════════════════
⌗ Tags: #burpsuite_profissional #ethical_hacking #linux #github #web_security
Medium
Install Burp Suite Professional 2026 (Linux )| By Dharavath Nagaraju
Burp Suite Professional is one of the most widely used tools for web application security testing, providing features that help security…
42 views
Daily Writeups
⤷ Title: The Supply Chain Security Interview Question I Couldn’t Answer — Until I Started Thinking Like an…
════════════════════════
𐀪 Author: Vineet Singh
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 20:31:18 GMT
════════════════════════
⌗ Tags: #information_security #enterprise_security #supply_chain_security #application_security #product_security
Medium
The Supply Chain Security Interview Question I Couldn’t Answer — Until I Started Thinking Like an Enterprise Architect
How a 25-minute interview discussion completely changed the way I think about Supply Chain Security.
27 views
Daily Writeups
⤷ Title: TryHackMe: Support Walkthrough
════════════════════════
𐀪 Author: Farid Narimanov
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:16:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_walkthrough #ethical_hacking #penetration_testing
Medium
TryHackMe: Support Walkthrough
Welcome to my writeup for the Support room on TryHackMe. This room is a fantastic playground for practicing fundamental web application…
24 views
Daily Writeups
⤷ Title: Phase One: Getting Situational Awareness Right
════════════════════════
𐀪 Author: Matthew Hennigan
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:14:27 GMT
════════════════════════
⌗ Tags: #windows_security #cybersecurity #penetration_testing #active_directory #red_team
Medium
Phase One: Getting Situational Awareness Right
How Active Directory penetration tests should begin with environmental context.
25 views
Daily Writeups
⤷ Title: “screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers| Web Exploitation : Hard
════════════════════════
𐀪 Author: Dr_ro0t
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:08:54 GMT
════════════════════════
⌗ Tags: #web_security #ctf_writeup #ssrf #cyber_talents
Medium
“screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers| Web Exploitation : Hard
Exploiting SSRF vulnerability, bypassing hostname filters, and leaking source code using PHP wrappers to capture the flag.
22 views
Daily Writeups
⤷ Title: SQL Injection Is Not Dead: Why an Old Vulnerability Still Breaks Modern Applications
════════════════════════
𐀪 Author: Security Clarity
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:18:56 GMT
════════════════════════
⌗ Tags: #information_security #sql_injection #vulnerability_management #cybersecurity
Medium
SQL Injection Is Not Dead: Why an Old Vulnerability Still Breaks Modern Applications
SQL injection is one of the oldest web application vulnerabilities.
37 views
Daily Writeups
⤷ Title: Reflected XSS into HTML context with most tags and attributes blocked
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 23:26:18 GMT
════════════════════════
⌗ Tags: #xss_attack #burpsuite #bug_bounty #cybersecurity #penetration_testing
Medium
Reflected XSS into HTML context with most tags and attributes blocked
Hello hunters,
27 views
Daily Writeups
⤷ Title: Beyond Recon: My Personal Methodology for Hunting High-Impact Vulnerabilities in 2026
════════════════════════
𐀪 Author: Abd Elhakim
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 23:06:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #methodology #ethical_hacking
Medium
Beyond Recon: My Personal Methodology for Hunting High-Impact Vulnerabilities in 2026
introduction
23 views
Daily Writeups
⤷ Title: Your bug bounty session has too many windows open. Crusader wants to fix that.
════════════════════════
𐀪 Author: Crusader Security
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 22:18:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #pentesting #bug_bounty_tips #penetration_testing
Medium
Your bug bounty session has too many windows open. Crusader wants to fix that.
A first look at Crusader — a local-first web security proxy built for how people actually hunt in 2026.
18 views