Daily Writeups
@Daily_Writeups
3.81K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.81K subscribers
Daily Writeups
⤷ Title: CVE-2026-69836: Microsoft Entra ID RCE : Why This Cloud Identity Flaw Matters
════════════════════════
𐀪 Author: Cyber Chronicle
════════════════════════
ⴵ Time: Fri, 21 Aug 2026 16:54:04 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #cybersecurity #rce_vulnerability #cloud_identity_and_access #microsoft_entra_id
Medium
CVE-2026-69836: Microsoft Entra ID RCE : Why This Cloud Identity Flaw Matters
Introduction
16 views
Daily Writeups
⤷ Title: picoCTF/CyLab SECURITY ACADEMY Web Exploitation: Sql Map1
════════════════════════
𐀪 Author: Gokulworkid
════════════════════════
ⴵ Time: Tue, 01 Sep 2026 15:32:07 GMT
════════════════════════
⌗ Tags: #sql_injection #ctf_walkthrough #picoctf #ctf_writeup #ctf
Medium
picoCTF/CyLab SECURITY ACADEMY Web Exploitation: Sql Map1
Category: Web Exploitation
13 views
Daily Writeups
⤷ Title: The Hallucinating Analyst: How an LLM-Powered SOC Missed a Blatant SQL Injection
════════════════════════
𐀪 Author: Avi Jain
════════════════════════
ⴵ Time: Tue, 01 Sep 2026 05:25:47 GMT
════════════════════════
⌗ Tags: #ai_agent #sql_injection #llm #ai #cybersecurity
Medium
The Hallucinating Analyst: How an LLM-Powered SOC Missed a Blatant SQL Injection
When security teams integrate Large Language Models (LLMs) into Security Operations Centers (SOCs), the primary selling point is…
13 views
Daily Writeups
⤷ Title: Understanding SQL Injection
════════════════════════
𐀪 Author: Rohan Rao
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 19:40:07 GMT
════════════════════════
⌗ Tags: #self_awareness #database #writing #sql_injection #sql
Medium
Understanding SQL Injection
Free member? Read here —
13 views
Daily Writeups
⤷ Title: SQLMap: The Basics: Automated SQL Injection Detection and Exploitation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 12:29:29 GMT
════════════════════════
⌗ Tags: #sqlmap #sql_injection #tryhackme #ethical_hacking #cybersecurity
Medium
SQLMap: The Basics: Automated SQL Injection Detection and Exploitation
Introduction
18 views
Daily Writeups
⤷ Title: I Turned One Tiny SQL Injection Into a Full Database Walkthrough — DVWA SQLi Lab
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 10:09:34 GMT
════════════════════════
⌗ Tags: #research #bug_bounty #cybersecurity #owasp #sql_injection
Medium
I Turned One Tiny SQL Injection Into a Full Database Walkthrough — DVWA SQLi Lab
How I went from a single quote to discovering tables, columns, usernames, and password hashes
12 views
Daily Writeups
⤷ Title: CVE-2026-9082: Testing Drupal’s Critical PostgreSQL SQL Injection
════════════════════════
𐀪 Author: Sandeep Vishwakarma
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 23:00:27 GMT
════════════════════════
⌗ Tags: #information_security #cve #drupal #cybersecurity #sql_injection
Medium
CVE-2026-9082: Testing Drupal’s Critical PostgreSQL SQL Injection
Greetings, fellow hackers! I’m Sandy, an Information Security Consultant and bug-bounty hunter. In this write-up, I want to share what I…
12 views
Daily Writeups
⤷ Title: C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
════════════════════════
𐀪 Author: Manohari Jayachandran
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 14:58:28 GMT
════════════════════════
⌗ Tags: #crud_api #sql_injection #debugging_csharp #code_review
Medium
C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
Most bad-code examples in tutorials are contrived — obviously wrong in a way real code never actually looks. This post takes a different…
15 views
Daily Writeups
⤷ Title: Parameterized Queries - The Simple Way to Prevent SQL Injection
════════════════════════
𐀪 Author: Ayantik Sarkar
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 04:44:26 GMT
════════════════════════
⌗ Tags: #database #postgresql #sql #sql_injection #security
Medium
Parameterized Queries - The Simple Way to Prevent SQL Injection
If you’ve worked with backend development, you’ve probably written SQL queries like:
21 views
Daily Writeups
⤷ Title: Building ShopSphere Part 5: Going Public, Staying Secure, Staying Aware (Route 53, CloudFront, WAF…
════════════════════════
𐀪 Author: Asutosh Nayak
════════════════════════
ⴵ Time: Fri, 28 Aug 2026 17:26:04 GMT
════════════════════════
⌗ Tags: #ddos_attack #dns #aws #cdn #sql_injection
Medium
Building ShopSphere Part 5: Going Public, Staying Secure, Staying Aware (Route 53, CloudFront, WAF, and Monitoring)
Picking Up Where We Left Off
17 views
Daily Writeups
⤷ Title: One Researcher Earned $811,000 Hunting Bugs for Google
════════════════════════
𐀪 Author: Muhamed Fazal PS
════════════════════════
ⴵ Time: Tue, 01 Sep 2026 08:10:36 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #hackerone #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
One Researcher Earned $811,000 Hunting Bugs for Google
if you are not a premium member then you can read this article for free here
15 views
Daily Writeups
⤷ Title: 1 Dangerous Hour: Delayed Role Revocation Bug in JWT Based Systems
════════════════════════
𐀪 Author: Revalda Haryadaffa Prabaswara
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 15:41:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup
Medium
1 Dangerous Hour: Delayed Role Revocation Bug in JWT Based Systems
DISCLAIMER: This write-up is shared strictly for educational and informational purposes only.
15 views
Daily Writeups
⤷ Title: How a Simple GraphQL Scope Bypass Led to an Account Takeover ($4,500 Bounty)
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 13:41:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #bug_bounty #hacking #bug_bounty_writeup
Medium
How a Simple GraphQL Scope Bypass Led to an Account Takeover ($4,500 Bounty)
Discover how analyzing GraphQL schema mutations and nested query parameters revealed a critical access control failure on a major target.
13 views
Daily Writeups
⤷ Title: I Called Myself “Admin” and the Site Let Me
════════════════════════
𐀪 Author: Hunter0x0
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 07:13:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips
Medium
I Called Myself “Admin” and the Site Let Me
I was hunting on a platform and signed up for a test account. Everything normal email, password, then pick a username.
14 views
Daily Writeups
⤷ Title: How to Start Bug Bounty Hunting in 2026: A Complete Beginner’s Guide
════════════════════════
𐀪 Author: ATNO For Cybersecurity | Hacking
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 23:41:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #bug_bounty_writeup
Medium
How to Start Bug Bounty Hunting in 2026: A Complete Beginner’s Guide 🐛💰
What Bug Bounty Hunting Actually Is 🎯
15 views
Daily Writeups
⤷ Title: ₹4,000 for a 2-Minute Google Search: Publicly Exposed Invoice Leaking Customer PII
════════════════════════
𐀪 Author: WhoAdnan
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 06:41:32 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty
Medium
💸 ₹4,000 for a 2-Minute Google Search: Publicly Exposed Invoice Leaking Customer PII
Introduction
12 views
Daily Writeups
⤷ Title: alg:none and Friends — A JWT Hacking Field Guide
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #bug_bounty_writeup #infosec #bug_bounty
Medium
alg:none and Friends — A JWT Hacking Field Guide
What’s up everyone! Nitin here 👋
12 views
Daily Writeups
⤷ Title: The Subdomain Recon Chain: subfinder → httpx → dnsx
════════════════════════
𐀪 Author: Muneebahmedkhan
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 15:25:58 GMT
════════════════════════
⌗ Tags: #tutorial #recon #bug_bounty #cybersecurity #infosec
Medium
The Subdomain Recon Chain: subfinder → httpx → dnsx
Turn a root domain into a short list of live hosts worth testing. subfinder finds candidate hosts, httpx keeps the ones answering on HTTP…
16 views
Daily Writeups
⤷ Title: Managing Scan Results in Metasploit
════════════════════════
𐀪 Author: Ryan Ryan
════════════════════════
ⴵ Time: Fri, 21 Aug 2026 10:55:32 GMT
════════════════════════
⌗ Tags: #pentesting #penetration_testing #recon #red_team #metasploit
Medium
Managing Scan Results in Metasploit
In this post, let’s go through managing scan results using Metasploit’s database. Covering everything from setup, workspaces, importing…
21 views
Daily Writeups
⤷ Title: The Interceptor That Fetched Anything: 1-Click Native Takeover in a Capacitor App
════════════════════════
𐀪 Author: Hussein Ayoub
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 07:24:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #android #security
Medium
The Interceptor That Fetched Anything: 1-Click Native Takeover in a Capacitor App
On hybrid apps, the bugs usually live in the gap between two features that are both fine by themselves: a WebView serving the app’s own…
13 views
Daily Writeups
⤷ Title: Web Cache Poisoning: One Response, Every Victim
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Wed, 26 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup #bug_bounty #hacking #infosec
Medium
Web Cache Poisoning: One Response, Every Victim
What’s up everyone! Nitin here 👋
11 views