Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Nmap Told Me What Was Exposed. Burp Told Me What the Application Was Actually Doing.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 27 Sep 2026 13:42:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #coding #programming #cybersecurity
Medium
Nmap Told Me What Was Exposed. Burp Told Me What the Application Was Actually Doing.
Moving from ports and services to HTTP requests, parameters, cookies, authentication, and application logic
127 views
Daily Writeups
⤷ Title: I Stopped Looking at Web Pages. I Started Reading HTTP Requests.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 17:00:26 GMT
════════════════════════
⌗ Tags: #ethical_hacking #programming #cybersecurity #technology #coding
31 views
Daily Writeups
⤷ Title: Open Source Without Rose-Colored Glasses
════════════════════════
𐀪 Author: Progsky
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 07:07:42 GMT
════════════════════════
⌗ Tags: #open_source #hacking #coding #ethical_hacking #cybersecurity
Medium
Open Source Without Rose-Colored Glasses
I’d like to note that this article won’t be crammed, as usual, with technical examples and code snippets — it’s more of a reflection. I…
28 views
Daily Writeups
⤷ Title: Unmatched Control: How Protectors and Malware Use SEH/VEH
════════════════════════
𐀪 Author: Progsky
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 08:08:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #hacking #coding
Medium
Unmatched Control: How Protectors and Malware Use SEH/VEH
A debugger gives us a clean almost perfect view of what’s happening. There’s the instruction. There’s the one.. There’s a clear line…
7 views
Daily Writeups
⤷ Title: The Bug Bounty Report That Got Closed as “Informative” (And How I Fixed It)
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 05:29:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #coding #bug_bounty #programming
Medium
The Bug Bounty Report That Got Closed as “Informative” (And How I Fixed It)
I still have the screenshot.
32 views
Daily Writeups
⤷ Title: The Login Worked. But What Actually Proved I Was Authenticated?
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 14:23:00 GMT
════════════════════════
⌗ Tags: #programming #ethical_hacking #technology #cybersecurity #coding
Medium
The Login Worked. But What Actually Proved I Was Authenticated?
Understanding authentication flows, session cookies, tokens, login state, logout, and the security boundaries between them
34 views
Daily Writeups
⤷ Title: You Were Logged In. You Still Weren’t Allowed to See It.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 06:43:29 GMT
════════════════════════
⌗ Tags: #coding #ethical_hacking #technology #cybersecurity #programming
Medium
You Were Logged In. You Still Weren’t Allowed to See It.
How authorization failures, object identifiers, and IDOR expose the difference between proving who you are and proving what you can access
25 views
Daily Writeups
⤷ Title: The API Wasn’t Hiding Anything. It Was Telling Me Exactly How the Application Worked.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 06:54:42 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #technology #coding #programming
Medium
The API Wasn’t Hiding Anything. It Was Telling Me Exactly How the Application Worked.
How API endpoints, JSON objects, undocumented parameters, HTTP methods, and authorization boundaries expose an application’s real attack…
13 views
Daily Writeups
⤷ Title: My First Week in Cyber Security: 6 TryHackMe Rooms and What They Taught Me
════════════════════════
𐀪 Author: Suryawanshimythrinathuk
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 17:26:17 GMT
════════════════════════
⌗ Tags: #coding #cybersecurity #tryhackme #deep_learning #aws
Medium
My First Week in Cyber Security: 6 TryHackMe Rooms and What They Taught Me
From electronics engineer to aspiring SOC Analyst, one room at a time
27 views
Daily Writeups
⤷ Title: Google Mantis: Turn Your Coding Agent Into a Security Reviewer
════════════════════════
𐀪 Author: Code Coup
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 03:04:39 GMT
════════════════════════
⌗ Tags: #coding #sql_injection #security #google_mantis #sql_injection_attack
Medium
Google Mantis: Turn Your Coding Agent Into a Security Reviewer
Most coding agents are getting very good at writing code.
37 views
Daily Writeups
⤷ Title: The API Accepted Fields I Never Expected It to Accept
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 12:08:16 GMT
════════════════════════
⌗ Tags: #coding #programming #ethical_hacking #technology #cybersecurity
Medium
The API Accepted Fields I Never Expected It to Accept
How mass assignment, over-posting, and server-side object binding turn harmless JSON into an authorization problem.
21 views
Daily Writeups
⤷ Title: The Application Followed Every Rule, Except the Business Rules
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 11:15:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #coding #programming #technology
Medium
The Application Followed Every Rule, Except the Business Rules
How valid API requests, broken workflows, race conditions, and flawed state transitions create vulnerabilities that traditional security…
47 views
Daily Writeups
⤷ Title: Two Requests. One Resource. A Security Bug.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 15:12:41 GMT
════════════════════════
⌗ Tags: #technology #ethical_hacking #programming #coding #cybersecurity
Medium
Two Requests. One Resource. A Security Bug.
How race conditions, TOCTOU flaws, and non-atomic operations break assumptions about payments, inventory, and authorization.
42 views
Daily Writeups
⤷ Title: The File Uploaded Successfully. That Was the First Mistake.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 15:23:00 GMT
════════════════════════
⌗ Tags: #coding #ethical_hacking #technology #programming #cybersecurity
Medium
The File Uploaded Successfully. That Was the First Mistake.
How file-upload validation, content-type confusion, storage design, and unsafe processing turn an ordinary feature into a security boundary…
45 views
Daily Writeups
⤷ Title: The Server Fetched the URL. I Never Expected It to Reach That Network.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:23:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #programming #technology #coding
Medium
The Server Fetched the URL. I Never Expected It to Reach That Network.
How server-side request forgery turns seemingly harmless URL-fetching features into unexpected access to internal services, cloud metadata…
16 views
Daily Writeups
⤷ Title: The API Accepted Fields I Never Expected It to Accept
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:05:32 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #programming #coding #cybersecurity
Medium
The API Accepted Fields I Never Expected It to Accept
How mass assignment turns ordinary JSON fields into privilege escalation, unauthorized account changes, and broken trust between clients…
24 views
Daily Writeups
⤷ Title: Claude Code Fixed One Bug and Created Two More
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:20:09 GMT
════════════════════════
⌗ Tags: #data_science #coding #python #technology #bug_bounty
Medium
Claude Code Fixed One Bug and Created Two More
The fix looked perfect until I ran the tests. Here’s what it taught me about debugging, automation, and trusting AI-generated code.
29 views
Daily Writeups
⤷ Title: The Request Was Valid. The Business Logic Wasn’t.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:28:21 GMT
════════════════════════
⌗ Tags: #programming #technology #cybersecurity #coding #ethical_hacking
Medium
The Request Was Valid. The Business Logic Wasn’t.
How attackers exploit workflow assumptions, inconsistent state transitions, pricing mistakes, and missing server-side rules to make…
59 views
Daily Writeups
⤷ Title: I Stopped Reading Error Messages as Errors
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 14:59:47 GMT
════════════════════════
⌗ Tags: #programming #technology #coding #ethical_hacking #cybersecurity
Medium
I Stopped Reading Error Messages as Errors
How HTTP status codes, TCP resets, timeouts, and application exceptions reveal what is happening beneath the surface.
18 views