Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Top 25 Website Security Misconfigurations (2026)
════════════════════════
𐀪 Author: Vaibhavk
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 04:35:18 GMT
════════════════════════
⌗ Tags: #api_security #ai_or_llm_security #sbom #website_misconfigurations #data_breach_response_plan
Medium
Top 25 Website Security Misconfigurations (2026)
Security misconfigurations remain the #1 most exploited vulnerability class — not because developers don’t care, but because modern web…
2 views
Daily Writeups
⤷ Title: Your API Is Not Your System
════════════════════════
𐀪 Author: Andrews Ferreira
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #application_security #offensive_security #api_security #threat_modeling #api_security_testing
Medium
Your API Is Not Your System
Why attackers model workflows while engineers secure endpoints
2 views
Daily Writeups
⤷ Title: When the Attacker Is an AI
════════════════════════
𐀪 Author: Prophaze
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 07:04:31 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #api_security #hugging_face #openai
Medium
When the Attacker Is an AI
The OpenAI–Hugging Face breach wasn’t really just an AI safety story. It was also an API security one.
2 views
Daily Writeups
⤷ Title: Stop Trusting Bearer Tokens: Build a DPoP-Protected API in .NET 10
════════════════════════
𐀪 Author: Michael Maurice
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 21:54:49 GMT
════════════════════════
⌗ Tags: #api_security #oauth #dotnet #aspnetcore #cybersecurity
Medium
Stop Trusting Bearer Tokens: Build a DPoP-Protected API in .NET 10
Bind OAuth access tokens to a client key, validate per-request proofs, and stop replay attacks with ASP.NET Core.
3 views
Daily Writeups
⤷ Title: The New Era of X Creators
════════════════════════
𐀪 Author: Sushila Devi
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 18:26:52 GMT
════════════════════════
⌗ Tags: #creators #xs
Medium
The New Era of X Creators
Why original content is now the only way to win.
4 views
Daily Writeups
⤷ Title: The WAF Blocked My XSS — So I Rotated What It Was Reading
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #xs #hacking #bug_bounty #infosec
Medium
The WAF Blocked My XSS — So I Rotated What It Was Reading
What’s up everyone! Nitin here 👋
4 views
Daily Writeups
⤷ Title: X just changed creator payouts. Here’s all you need to know about the new Original Content Rewards
════════════════════════
𐀪 Author: Tesleem Amuda
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 22:17:29 GMT
════════════════════════
⌗ Tags: #content_creation #xs #payouts #content_writing #twitter
Medium
X just changed creator payouts. Here’s all you need to know about the new Original Content Rewards
Just saw the official update on the new Original Content Rewards program, and as someone who’s been in the old Creator Revenue Sharing for…
4 views
Daily Writeups
⤷ Title: A Bank’s HR Team Was Hacking Themselves Every Time They Opened My Job Application
════════════════════════
𐀪 Author: tushar
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 12:24:18 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #web_security #cybersecurity #xs #bug_bounty
Medium
A Bank’s HR Team Was Hacking Themselves Every Time They Opened My Job Application
How a 4-character file name prefix turned a resume upload into a persistent backdoor into a Ukrainian bank’s HR panel — and why this class…
5 views
Daily Writeups
⤷ Title: 欧州委員会がXのデジタルサービス法遵守に向けた行動計画を受け入れ（2026年8月7日公開）
════════════════════════
𐀪 Author: Eiji Sasahara (笹原英司), Ph.D., MBA
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 20:01:02 GMT
════════════════════════
⌗ Tags: #digital_services_act #xs #european_commission
4 views
Daily Writeups
⤷ Title: 關於 CSP 和 CDN cache 間的取捨
════════════════════════
𐀪 Author: June
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 08:10:00 GMT
════════════════════════
⌗ Tags: #xs #csp #cdn_cache
4 views
Daily Writeups
⤷ Title: Welcome to the digital marketing
════════════════════════
𐀪 Author: Sumaiya Bogura
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 06:49:38 GMT
════════════════════════
⌗ Tags: #facebook #xs
Medium
Welcome to the digital marketing
I am a good student .
7 views
Daily Writeups
⤷ Title: SQL injection attack, querying the database type and version on Oracle
════════════════════════
𐀪 Author: Youssef AlaaEldin
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 19:27:50 GMT
════════════════════════
⌗ Tags: #labs #version_on_oracle #portswigger #oracle_database #sqli
Medium
SQL injection attack, querying the database type and version on Oracle
Portswigger Lab
4 views
Daily Writeups
⤷ Title: Webhooks, Integrations & the SSRF Playground
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #ssrf #technology #cybersecurity #ethical_hacking #webhooks
Medium
Webhooks, Integrations & the SSRF Playground
Hey everyone! Nitin here, and this is the FINAL post of this series 👋🎉
5 views
Daily Writeups
⤷ Title: AWS Cloud Security Challenge: SSRF, IMDSv2, and Cloud Takeover
════════════════════════
𐀪 Author: Arun balaji
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 08:47:20 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ssrf #cloud_services #cloud_security #aws
Medium
AWS Cloud Security Challenge: SSRF, IMDSv2, and Cloud Takeover
Hey everyone, It's been a while, and I’m back with an interesting challenge this time. This challenge is from Fampay CTF, where we need to…
6 views
Daily Writeups
⤷ Title: XSS (Çapraz Site Komut Dosyası Çalıştırma)
════════════════════════
𐀪 Author: MuharremAltmisoglu
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 11:37:48 GMT
════════════════════════
⌗ Tags: #reflected_xss #dom_based_xss #xss_attack #stored_xss #xss_vulnerability
9 views
Daily Writeups
⤷ Title: Bir XSS Turu: Temelden Az Bilinene (9 farklı senaryo)
════════════════════════
𐀪 Author: Aliayyildiz
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 12:57:41 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #stored_xss #xss_attack #reflected_xss #xss_bypass
8 views
Daily Writeups
⤷ Title: DOM XSS using web messages
════════════════════════
𐀪 Author: Mubin mujawar
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 10:51:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_vulnerability #portswigger #javascript #web_security
Medium
DOM XSS using web messages
Exploiting an Unchecked postMessage Listener — DOM XSS Using Web Messages (PortSwigger Academy)
7 views
Daily Writeups
⤷ Title: I Tested My Website for Security — And Found XSS & SQL Injection
════════════════════════
𐀪 Author: The Knowledge Foundry
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 13:04:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #web_development #ai
Medium
I Tested My Website for Security — And Found XSS & SQL Injection
After testing my website’s security, I found evidence of XSS and SQL injection.
6 views
Daily Writeups
⤷ Title: Deep Dive: OIDC & SAML Implementation + SQL Injection & XSS Hardening (Part 2)
════════════════════════
𐀪 Author: Boovaneshbk
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 08:12:29 GMT
════════════════════════
⌗ Tags: #golang #sql_injection #xss_attack #cybersecurity #golang_development
Medium
Deep Dive: OIDC & SAML Implementation + SQL Injection & XSS Hardening (Part 2)
This continues the Cybersecurity Fundamentals article with full working walkthroughs for the two topics that came up most in your original…
5 views
Daily Writeups
⤷ Title: Web Security Lab — Blind SQL Injection with Conditional Responses | PortSwigger Practitioner
════════════════════════
𐀪 Author: Khushbu
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 09:42:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #blind_sql_injection #infosec #ctf_writeup #sql_injection
Medium
Web Security Lab — Blind SQL Injection with Conditional Responses | PortSwigger Practitioner
The previous SQL injection lab gave me everything directly — table names, column names, passwords all visible in the response. This one…
3 views
Daily Writeups
⤷ Title: Advanced Disposable Syringe Injection Moulding Machine Experts
════════════════════════
𐀪 Author: Pplastmach
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 05:43:20 GMT
════════════════════════
⌗ Tags: #injection_moulding #advanced #syringe #disposable #sql_injection
Medium
Advanced Disposable Syringe Injection Moulding Machine Experts
Patel Plastic Machinery Mfrs. is well known to be a specialist with great expertise in providing a quality Disposable Syringe Plastic…
3 views