Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: picoCTF-NO FA Write-up
════════════════════════
𐀪 Author: Rayenbenali
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 17:21:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #capture_the_flag #web_security #ctf_write_ups #ethical_hacking
Medium
picoCTF-NO FA Write-up
CTF Name: No FA
30 views
Daily Writeups
⤷ Title: Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 23:59:39 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 23:33:10 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 23:28:15 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: $6,800 for Sending Fields Nobody Asked Me To Send: A Mass Assignment Privilege Escalation
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 19:06:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #bug_bounty_tips #security
Medium
$6,800 for Sending Fields Nobody Asked Me To Send: A Mass Assignment Privilege Escalation
This is the bug I’m most tempted to describe as “free,” because building the payload took about four minutes once I understood the shape of…
23 views
Daily Writeups
⤷ Title: Google Just Confirmed Gemini Hacked 3 Real Companies
════════════════════════
𐀪 Author: The Hidden Layer
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 19:40:03 GMT
════════════════════════
⌗ Tags: #hacking #google #artificial_intelligence #gemini #ai
Medium
Google Just Confirmed Gemini Hacked 3 Real Companies
Google has confirmed something that sounds like it came straight out of a cybersecurity movie.
19 views
Daily Writeups
⤷ Title: Azure Cloud Shell Privilege Escalation Through Persistent Storage
════════════════════════
𐀪 Author: Nairuz Abulhul
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 18:47:29 GMT
════════════════════════
⌗ Tags: #pentesting #cloud #azure #hacking #red_team
Medium
Azure Cloud Shell Privilege Escalation Through Persistent Storage
Modifying Cloud Shell Files to Capture Azure Access Tokens
19 views
Daily Writeups
⤷ Title: 100 Days of Bug Bounty — Day 1
════════════════════════
𐀪 Author: Zubair Ahmed
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 18:10:59 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #security #bug_hunting #penetration_testing #bug_bounty_writeup
Medium
100 Days of Bug Bounty — Day 1 🐞
Today, I’m starting something I’ve wanted to do for a while: 100 days of bug bounty.
18 views
Daily Writeups
⤷ Title: Why Most People Who Try to Learn Ethical Hacking Quit in the First Month
════════════════════════
𐀪 Author: Dahood Dahood
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 18:45:54 GMT
════════════════════════
⌗ Tags: #learning_cybersecurity #ethical_hacking #ethical_hacking_roadmap #cybersecurity #machine_learning
Medium
Why Most People Who Try to Learn Ethical Hacking Quit in the First Month
If you’ve ever tried to teach yourself ethical hacking, you already know the pattern. You search “how to learn ethical hacking,” get 200…
23 views
Daily Writeups
⤷ Title: Bearer Token vs JWT vs OAuth 2.0 — Stop Mixing Them Up
════════════════════════
𐀪 Author: Code Crack
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 18:19:22 GMT
════════════════════════
⌗ Tags: #authenticatio #dotnet_core #oauth2 #api_security #jwt_token
Medium
Bearer Token vs JWT vs OAuth 2.0 — Stop Mixing Them Up
If you work with APIs, you’ve probably heard these terms many times:
31 views
Daily Writeups
⤷ Title: ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:57:45 +0000
════════════════════════
⌗ Tags: #Hacking News #Data Breaches #Security #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Defacement #FBI #Kash Patel #ShinyHunters
Hackread
ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data
ShinyHunters hacks the FBI Jobs portal, claims data on FBI agents, and says it stole substantial job applicant records in a PeopleSoft zero-day attack.
30 views
Daily Writeups
⤷ Title: How I Went from Zero Experience to Finding Valid Bugs on HackerOne
════════════════════════
𐀪 Author: h1ddn
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:48:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #hackerone
Medium
How I Went from Zero Experience to Finding Valid Bugs on HackerOne
About Me: I hunt under the handle I1ce on HackerOne.
16 views
Daily Writeups
⤷ Title: The Bug Bounty Blindspot: Why Crowdsourced Triage Leaves You More Exposed (and Costs You More) Than…
════════════════════════
𐀪 Author: CypherNova1337
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:30:01 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #cybersecurity #bug_bounty #infosec
Medium
The Bug Bounty Blindspot: Why Crowdsourced Triage Leaves You More Exposed (and Costs You More) Than a Real Pen Test
Corporate security leaders love the crowdsourced bug bounty pitch. The sales team from a major platform steps into your boardroom with a…
14 views
Daily Writeups
⤷ Title: Bug Bounty শুরু করার আগে যা বুঝতে হবে
════════════════════════
𐀪 Author: Md. Mehedi hasan Babu
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:23:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #bug_bounty #hacking
Medium
Bug Bounty শুরু করার আগে যা বুঝতে হবে
আপনি একটা bug bounty program-এ target পেলেন। Scope দেখলেন। একটা domain, কিছু subdomain, একটা web app।
14 views
Daily Writeups
⤷ Title: Applications and Innovations of Wireless Sensor Networks
════════════════════════
𐀪 Author: Nextelle
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 21:35:29 GMT
════════════════════════
⌗ Tags: #wireless #neural_networks #application_security #sensors #innovation
Medium
Applications and Innovations of Wireless Sensor Networks
Wireless Sensor Networks (WSNs) are a game-changing technology that has transformed several sectors and uses. These networks are made up of…
28 views
Daily Writeups
⤷ Title: Having fun with AES in CBC Mode
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:55:22 GMT
════════════════════════
⌗ Tags: #malware #malware_analysis #infosec #pentesting #cybersecurity
17 views
Daily Writeups
⤷ Title: Passed the OSCP — My Experience and Tips
════════════════════════
𐀪 Author: AM
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 20:12:26 GMT
════════════════════════
⌗ Tags: #offensive_security #oscp #penetration_testing
Medium
Passed the OSCP - My Experience and Tips
I have a background in penetration testing and I have seen most of the concepts in real engagements but what makes this exam really hard is…
21 views
Daily Writeups
⤷ Title: VulnHub :Corrosion: 1 CTF Çözümü
════════════════════════
𐀪 Author: Azat Dicle
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 21:55:12 GMT
════════════════════════
⌗ Tags: #corrosion #vulnerability #vulnhub #vulnhub_walkthrough #ctf_writeup
22 views
Daily Writeups
⤷ Title: 52 Request Smuggling Reports. Two Rules Decide the Payout.
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 22:42:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #bug_bounty #http_request_smuggling #cybersecurity
Medium
52 Request Smuggling Reports. Two Rules Decide the Payout.
30-Second Version: On August 5, PortSwigger published “CRLF-Powered Desync Attacks,” which turns plain HTTP header injection into full…
22 views
Daily Writeups
⤷ Title: Insecure Authorization on *** Android — mobile application
════════════════════════
𐀪 Author: Joko Purwanto
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 22:16:43 GMT
════════════════════════
⌗ Tags: #bug_bounty #insecure_auth #bug_hunting #mobile_pentest
Medium
Insecure Authorization on *** Android — mobile application
Assalamualaikum wr.wb.
19 views
Daily Writeups
⤷ Title: La IA está cambiando las operaciones cibernéticas ofensivas
════════════════════════
𐀪 Author: Nahum Deavila
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 22:23:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #artificial_intelligence
Medium
La próxima evolución de las operaciones cibernéticas
Procesos que para un operador humano podrían tomar días o semanas pueden convertirse en horas para la inteligencia artificial
17 views