Daily Writeups
@Daily_Writeups
3.97K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.97K subscribers
Daily Writeups
⤷ Title: From SQL Injection to OS Command Injection: My Kioptrix Level 2 Lab Journey
════════════════════════
𐀪 Author: Mohamed ibrahim NaseF
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 18:35:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cybersecurity #sql_injection #linux_security
Medium
From SQL Injection to OS Command Injection: My Kioptrix Level 2 Lab Journey
A hands-on cybersecurity assessment covering vulnerability discovery, exploitation evidence, risk analysis, and remediation in an…
17 views
Daily Writeups
⤷ Title: Whose Code Is It Anyway: 2FA Broken Logic
════════════════════════
𐀪 Author: Kaustubh Asthana
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 18:34:07 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #burpsuite #cybersecurity #penetration_testing #portswigger_lab
Medium
Whose Code Is It Anyway: 2FA Broken Logic
A return to authentication after a run through command injection, and a lab that breaks two-factor verification without ever touching a…
14 views
Daily Writeups
⤷ Title: SQL Injection Explained: From UNION Attacks to Blind SQLi
════════════════════════
𐀪 Author: Aditya Pandey
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 17:30:34 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #sql_injection #ethical_hacking #cybersecurity
Medium
SQL Injection Explained: From UNION Attacks to Blind SQLi
My practical learning notes from PortSwigger Web Security Academy
21 views
Daily Writeups
⤷ Title: HackTheBox Sherlocks Write-up Logjammer
════════════════════════
𐀪 Author: Youssef Mahrous
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 17:11:06 GMT
════════════════════════
⌗ Tags: #sherlock #hackthebox_writeup #blue_team
Medium
HackTheBox Sherlocks Write-up Logjammer
Scenario :You have been presented with the opportunity to work as a junior DFIR consultant for a big consultancy. However, they have…
22 views
Daily Writeups
⤷ Title: 5 Real-World Attack Scenarios Every Entry-Level Cybersecurity Analyst Should Know
════════════════════════
𐀪 Author: Munaza Cyber
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 18:58:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #cybersecurity #cyber_security_awareness #careers
Medium
5 Real-World Attack Scenarios Every Entry-Level Cybersecurity Analyst Should Know
Imagine you're working your first SOC shift. An alert appears on your SIEM dashboard. Multiple failed login attempts, a suspicious…
33 views
Daily Writeups
⤷ Title: Sherlock vs WhatsMyName: What Username Enumeration Actually Tells You
════════════════════════
𐀪 Author: Abdul Rehman
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 18:38:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #osint #information_security #digital_forensics
Medium
Sherlock vs WhatsMyName: What Username Enumeration Actually Tells You
You enter one username with Sherlock and with Whatsmyname. Both tools returns multiple accounts across the Internet. But, did you…
35 views
Daily Writeups
⤷ Title: LFI Bypass: Double URL Encoding Path Traversal
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 19:33:06 GMT
════════════════════════
⌗ Tags: #bypass_technique #bug_bounty_tips #bug_bounty_writeup #lfi_vulnerability #bug_bounty
Medium
LFI Bypass: Double URL Encoding Path Traversal
Local File Inclusion (LFI) filters often block ../ patterns—but double encoding can slip right past them. This payload uses %252e…
❤1
30 views
Daily Writeups
⤷ Title: I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability | Samadhan Shimple
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #web_application_security #api_security #cybersecurity
Medium
I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability |by Samadhan Shimple
How missing rate limits can turn an ordinary AI chat feature into a resource-consumption risk.
28 views
Daily Writeups
⤷ Title: How a Bangladeshi Govt Employee-Freelancer Became Tool of North Korea’s Cybercrime Network
════════════════════════
𐀪 Author: Tausif N Akbar
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 20:26:08 GMT
════════════════════════
⌗ Tags: #hacking #bangladesh #north_korea
Medium
How a Bangladeshi Govt Employee-Freelancer Became Tool of North Korea’s Cybercrime Network
An investigation by Indicator author and renowned journalist Craig Silverman found that a Bangladeshi government employee-freelancer was…
33 views
Daily Writeups
⤷ Title: TryHackMe: Mr. Robot CTF Walkthrough | Reconnaissance to Root Access
════════════════════════
𐀪 Author: Muhammed Rizwan PR
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 19:11:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf_walkthrough #hacking #mr_robot_ctf #cybersecurity
Medium
TryHackMe: Mr. Robot CTF Walkthrough | Reconnaissance to Root Access
CTF Lab Description
27 views
Daily Writeups
⤷ Title: Where to Find Cybersecurity Experts With Years of Experience in the Cyber Field
════════════════════════
𐀪 Author: Community Cyber Security Incident Response
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 19:15:12 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity_expert #cybersecurity #cyber_defense #penetration_testing
Medium
Where to Find Cybersecurity Experts With Years of Experience in the Cyber Field
Digital threats operate around the clock, meaning your security strategy must be equally relentless. SmatchoiceHackers provides a premier…
40 views
Daily Writeups
⤷ Title: The OWASP Top 10 2025 Is Here — And You Can Hack Every Item Live
════════════════════════
𐀪 Author: Thexssrat
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 20:42:04 GMT
════════════════════════
⌗ Tags: #owasp #web_security #penetration_testing #cybersecurity #ethical_hacking
Medium
The OWASP Top 10 2025 Is Here — And You Can Hack Every Item Live
A hands-on walkthrough of the new list by Wesley Thijs — The XSS Rat
47 views
Daily Writeups
⤷ Title: ShadowGate (HackSmarter)
════════════════════════
𐀪 Author: Daniel Lewis
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 21:45:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #hacking #red_team #cybersecurity
Medium
ShadowGate (HackSmarter)
Overview
38 views
Daily Writeups
⤷ Title: Network Scanning Using Android: 25+ Nmap Commands Every Beginner Should Know
════════════════════════
𐀪 Author: Sooraj Pandey
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 21:48:23 GMT
════════════════════════
⌗ Tags: #termux #nmap #ethical_hacking #cybersecurity #networking
Medium
📱 Network Scanning Using Android: 25+ Nmap Commands Every Beginner Should Know
By Sooraj Pandey — Cybersecurity Trainer | Ethical Hacker | Web Penetration Tester | Full-Stack Developer
38 views
Daily Writeups
⤷ Title: How I Identified a Potential Subscription Payment Enforcement Issue Despite Insufficient Funds
════════════════════════
𐀪 Author: Molapo Manuel
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 23:18:56 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #bug_bounty_writeup #bugs #bug_bounty
Medium
How I Identified a Potential Subscription Payment Enforcement Issue Despite Insufficient Funds
This research was conducted on a live target, and the issue was privately reported to the platform.
28 views
Daily Writeups
⤷ Title: Defeating the Mirage: A Hands-On Guide to HTTP/2 Request Smuggling (H2.CL)
════════════════════════
𐀪 Author: Huzaifah Tahir
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 00:00:54 GMT
════════════════════════
⌗ Tags: #cl_and_te_issues #hacking #cybersecurity #h2cl_request_smuggling #web_exploitation
Medium
Defeating the Mirage: A Hands-On Guide to HTTP/2 Request Smuggling (H2.CL)
For years, the cybersecurity community treated HTTP/2 as the ultimate silver lining for transport-layer security. By replacing the archaic…
24 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 22:51:03 GMT
════════════════════════
⌗ Tags: #malware_analysis #malware #static_analysis #cybersecurity #hacking
Medium
Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
In this lab, we will analyze lab 1–4 from Practical Malware Analysis book. The goal is to examine the malware sample Lab01–04.exe using…
43 views
Daily Writeups
⤷ Title: Starting My CPTS Journey: From Zero to Root on My First Unguided HTB Box
════════════════════════
𐀪 Author: Xmastaheer
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 00:01:46 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #infosec #ethical_hacking #penetration_testing
Medium
Starting My CPTS Journey: From Zero to Root on My First Unguided HTB Box
A few weeks ago, I’d never touched HackTheBox. I’d worked through TryHackMe’s Pentesting path, felt reasonably comfortable with the basics…
46 views
Daily Writeups
⤷ Title: KB-VULN: 2 ~ VulnHub — Walk through
════════════════════════
𐀪 Author: M.Fida Hussain
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 23:50:49 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #hacker #best_practices
Medium
KB-VULN: 2 ~ VulnHub — Walk through
Name: KB-VULN: 2 URL: https://www.vulnhub.com/entry/kb-vuln-2,562/ Release Date: 17 Sep 2020 Author: Fida -Hussain Difficulty Stated…
54 views
Daily Writeups
⤷ Title: Nobody Bans AI Bug Reports. You Can Still Get Permanently Banned.
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 01:11:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #ethical_hacking #bug_bounty #artificial_intelligence
Medium
Nobody Bans AI Bug Reports. You Can Still Get Permanently Banned.
I read the AI rules at HackerOne, Django, Bugcrowd, Riot Games and Nextcloud, plus the postmortems from curl, Google and Apple. The line…
50 views
Daily Writeups
⤷ Title: Slayer (HackSmarter)
════════════════════════
𐀪 Author: Daniel Lewis
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 03:45:30 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #red_team #hacking
Medium
Slayer (HackSmarter)
Overview
48 views