Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:19:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS #AWS JavaScript SDK #CI/CD security #Cloud Security #CodeBreach #github #ID Eclipse #Regex Vulnerability #supply chain attack #Wiz Research
Daily CyberSecurity
CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover
A seemingly minor misconfiguration in a regular expression could have allowed attackers to seize control of critical AWS infrastructure, potentially compromising millions of cloud environments. Se…
16 views
Daily Writeups
⤷ Title: CodeBreach: How Two Missing Characters Almost Toppled the AWS Cloud
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 04:37:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #AWS #Cloud Security 2026 #CodeBreach #CodeBuild #Github #Infosec #JavaScript SDK #Regex Vulnerability #supply chain attack #Wiz Research
Penetration Testing Tools
CodeBreach: How Two Missing Characters Almost Toppled the AWS Cloud
Security researchers from the cybersecurity firm Wiz have unearthed a critical vulnerability within the AWS CodeBuild service, which
13 views
Daily Writeups
⤷ Title: HackTheBox Sherlocks: Brutus
════════════════════════
𐀪 Author: dovidee
════════════════════════
ⴵ Time: Sun, 08 Feb 2026 18:03:47 GMT
════════════════════════
⌗ Tags: #regex #persistence #cybersecurity #hacking #hackthebox
Medium
HackTheBox Sherlocks: Brutus
This is my writeup for ‘Brutus’, HackTheBox Sherlocks.
37 views
Daily Writeups
⤷ Title: How I Bypassed Giant Swarm’s Nginx Regex to Score a Critical SSRF
════════════════════════
𐀪 Author: Sumit Shah (HackSage)
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 16:18:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #ssrf #cloud #regex #bug_bounty
Medium
How I Bypassed Giant Swarm’s Nginx Regex to Score a Critical SSRF
Hello, hunters👾. Most researchers look for critical impact in complex business logic, race conditions, or deep application flows. But…
38 views
Daily Writeups
⤷ Title: Regular Expressions
════════════════════════
𐀪 Author: Citadel Cybersec
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 09:29:57 GMT
════════════════════════
⌗ Tags: #intrusion_detection #regex #regex_for_security #cybersecurity #tryhackme
Medium
Regular Expressions
A TryHackMe Practical Exercise Writeup
38 views
Daily Writeups
⤷ Title: Whitespace Flaw Re-Opens Critical JWT “Algorithm Confusion” Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Algorithm Confusion #Authentication Bypass #Cache Collision #CVE_2026_34950 #CVE_2026_35039 #cybersecurity #fast_jwt #HMAC #infosec #JWT #Node.js #Regex Flaw #RSA #Web Security
Daily CyberSecurity
Whitespace Flaw Re-Opens Critical JWT "Algorithm Confusion" Bypass
CVE-2026-34950: A critical 9.1 CVSS flaw in fast-jwt allows authentication bypass via leading whitespace. Learn how a regex error leads to algorithm confusion.
23 views
Daily Writeups
⤷ Title: Regex Injection ve E-posta Parametre Manipülasyonu ile Hesap Ele Geçirme
════════════════════════
𐀪 Author: Şahnur Eren Aloğlu
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 23:48:07 GMT
════════════════════════
⌗ Tags: #regex #web_security #hacking #pentester
Medium
Regex Injection ve E-posta Parametre Manipülasyonu ile Hesap Ele Geçirme
Keşif Süreci: Duvara Toslamak
11 views
Daily Writeups
⤷ Title: Critical 9.1 Auth Bypass Hits Budibase Operations Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #Budibase #CVSS 9.1 #DevOps #infosec #Koa Framework #Patch Alert #Regex Security #user_enumeration #Web Security
Daily CyberSecurity
Critical 9.1 Auth Bypass Hits Budibase Operations Platform
A critical 9.1 CVSS flaw in Budibase lets attackers bypass auth via unanchored regex. Protect your user database—update to version 3.35.4 immediately.
10 views
Daily Writeups
⤷ Title: Swapper – A Pure Regex Match/Replace Burp Extension
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 06 May 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Dave Blandford #How_To #Informational #Mobile #Web App #Burp extensions #Desktop App Testing #Mobile App Testing #Regex #Web App Testing
Black Hills Information Security, Inc.
Swapper - A Pure Regex Match/Replace Burp Extension - Black Hills Information Security, Inc.
To get a valid session token to use with Burp Suite tools, I ended up writing a small Python extension (110 lines of code, but who’s counting?) that obtained a new session token for each request, allowing items like Intruder to work as intended. Cool, I was…
16 views
Daily Writeups
⤷ Title: THE ART OF FINDING HIDDEN THINGS IN BUG BOUNTY HUNTING (regex, pipes& one liners).
════════════════════════
𐀪 Author: 0xmous27
════════════════════════
ⴵ Time: Sat, 09 May 2026 20:12:07 GMT
════════════════════════
⌗ Tags: #web_security #regex #infosec #penetration_testing #reconnaissance
Medium
THE ART OF FINDING HIDDEN THINGS IN BUG BOUNTY HUNTING (regex, pipes& one liners).
hellow fellors ,its 0xmous27 again. friend-link for free reading this article
40 views