Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:08:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #web_security #ethical_hacking
Medium
Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
How a ../ in a URL parameter turns into CSRF, cache deception, and account takeover.
18 views
Daily Writeups
⤷ Title: Configuration isn’t proof: an open-source way to show your applications are built securely
════════════════════════
𐀪 Author: Michael Lawrence
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 17:09:09 GMT
════════════════════════
⌗ Tags: #owasp #application_security #devsecops #open_source #software_development
Medium
Configuration isn’t proof: an open-source way to show your applications are built securely
FortProof is a free, open-source engine that judges every security control from evidence of what actually ran, never from what was…
24 views
Daily Writeups
⤷ Title: https://www.fiverr.com/s/3AANZxa
════════════════════════
𐀪 Author: Ador Khan
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:34:30 GMT
════════════════════════
⌗ Tags: #osint_investigation #ai #hacking #osint_tool #osint
Medium
https://www.fiverr.com/s/3AANZxa
“” is published by Ador Khan.
18 views
Daily Writeups
⤷ Title: The O365 Intrusion | TryHackMe CTF Writeup
════════════════════════
𐀪 Author: Wynn
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:23:26 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #tryhackme_writeup #cybersecurity #ctf
Medium
The O365 Intrusion|TryHackMe CTF Writeup
The O365 Intrusion|TryHackMe CTF Writeup Access Room: https://tryhackme.com/room/theo365intrusion Start with Marcus Webb’s sign-in history for the day. I pulled a few details from the company …
30 views
Daily Writeups
⤷ Title: Just Ask: Exploiting Excessive Agency in an LLM
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 17:45:50 GMT
════════════════════════
⌗ Tags: #portswigger_lab #api_security #llm_security #excessive_agency #web_llm_attacks
Medium
Just Ask: Exploiting Excessive Agency in an LLM
From customer support chat to database deletion: following the tools in a PortSwigger Web LLM lab.
38 views
Daily Writeups
⤷ Title: Live Video Moderation Challenges Traditional Content Safety Systems
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 20:35:06 +0000
════════════════════════
⌗ Tags: #Technology #Content Safety #Moderation
Hackread
Live Video Moderation Challenges Traditional Content Safety Systems
Learn how live video moderation handles frame sampling, end-to-end encryption, behavioural signals, privacy and content retention in video chat.
29 views
Daily Writeups
⤷ Title: Kernel Shellcode Execution via PTE Manipulation and HalDispatchTable
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 20:35:34 GMT
════════════════════════
⌗ Tags: #windows #malware #hacking #pentesting #cybersecurity
Medium
Kernel Shellcode Execution via PTE Manipulation and HalDispatchTable
Welcome to this new Medium post, today we are looking at this technique: use a vulnerable driver’s read/write primitives to promote a…
27 views
Daily Writeups
⤷ Title: RTFM: TeamUpdraft (UpdraftPlus) and WordPress Hack on the RTFM Blog
════════════════════════
𐀪 Author: Arseny Zinchenko (setevoy)
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:18:52 GMT
════════════════════════
⌗ Tags: #hacking #php #security #wordpress
Medium
RTFM: TeamUpdraft (UpdraftPlus) and WordPress Hack on the RTFM Blog
A detailed analysis of the hack on the WordPress blog and RTFM caused by the TeamUpdraft data leak, an analysis of the backdoor, and a compl
18 views
Daily Writeups
⤷ Title: DEADFACE CTF 2025 -Hostbusters: Linux Track
════════════════════════
𐀪 Author: FireSF{}
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:51:29 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #linux #cybersecurity #privilege_escalation
Medium
DEADFACE CTF 2025 -Hostbusters: Linux Track
How One Vulnerability Unlocked Seven Challenges
19 views
Daily Writeups
⤷ Title: Your Digital Footprint Is Bigger Than You Think: How to Audit It for Free.
════════════════════════
𐀪 Author: Munaza Cyber
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:08:55 GMT
════════════════════════
⌗ Tags: #ethical_hacking #future #cybersecurity #tech #personal_development
Medium
Your Digital Footprint Is Bigger Than You Think: How to Audit It for Free.
I used to think online privacy was mostly about having a strong password and keeping my personal information private. But the more I…
26 views
Daily Writeups
⤷ Title: Best tools to manage multiple X (Twitter) accounts as a team
════════════════════════
𐀪 Author: Teona B.
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 20:56:27 GMT
════════════════════════
⌗ Tags: #twitter #cloud_phone #social_media_management #xs #multi_account
Medium
Best tools to manage multiple X (Twitter) accounts as a team
The best tools to manage multiple Twitter accounts as a team start with X itself. The built-in switcher keeps several accounts signed in on…
30 views
Daily Writeups
⤷ Title: bb
════════════════════════
𐀪 Author: kemal cam
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:57:04 GMT
════════════════════════
⌗ Tags: #xs
Medium
bb
bb --- a/takaschain-frontend/src/features/forms/index.ts +++ b/takaschain-frontend/src/features/forms/index.ts @@ -2,3 +2,4 @@ export { NameModal, KeyModal } from './ui/accountNameKeyModals'; …
33 views
Daily Writeups
⤷ Title: Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:40:20 +0000
════════════════════════
⌗ Tags: #Security #Technology #Browsing #internet #IP Address #Privacy
Hackread
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
Discover how multi-cloud environments create security blind spots, inconsistent access controls, risks and how CCSP strategies help strengthen cloud security.
26 views
Daily Writeups
⤷ Title: The Bug Bounty Dream Is Lying to You. Here’s the Real Math.
════════════════════════
𐀪 Author: Red Byte
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:10:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #fundamentals #webhackingkr #bug_bounty
Medium
The Bug Bounty Dream Is Lying to You. Here’s the Real Math.
“I’ll make lakhs from bug bounty.” That’s the dream thousands chase the moment they step into cybersecurity. Twitter threads show…
20 views
Daily Writeups
⤷ Title: Five questions on managing application security
════════════════════════
𐀪 Author: Flinks Engineering
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 22:16:54 GMT
════════════════════════
⌗ Tags: #software_engineering #data_lake #cybersecurity #application_security
Medium
Five questions on managing application security
What happens when automated scanners scale your daily workload by an order of magnitude.
20 views
Daily Writeups
⤷ Title: India’s Cyber Agency Caught Agents Reusing Leaked Keys. Here’s the Fix in ASP.NET Core.
════════════════════════
𐀪 Author: Krati Varshney
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:23:18 GMT
════════════════════════
⌗ Tags: #aspnetcore #application_security #oauth #cybersecurity #ai_agent
Medium
India’s Cyber Agency Caught Agents Reusing Leaked Keys. Here’s the Fix in ASP.NET Core.
India’s cyber agency just documented agents reading confidential records through credentials nobody had locked down. None of the affected…
15 views
Daily Writeups
⤷ Title: The $50 Breach: How One Hacker Used AI Agents to Rob 100 Companies
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:17:37 GMT
════════════════════════
⌗ Tags: #hacking #ai_agent #ai_hacking #autonomous_agent #cybersecurity
Medium
The $50 Breach: How One Hacker Used AI Agents to Rob 100 Companies
Reuters reported it yesterday. One operator, 23 hours per intrusion, $5,000 in tokens. Offensive security just got industrialized.
13 views
Daily Writeups
⤷ Title: One Rule Caught Every Attack. Then I Stopped Using the Words It Was Watching For.
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:52:17 GMT
════════════════════════
⌗ Tags: #red_team #information_security #cybersecurity #ai #infosec
Medium
One Rule Caught Every Attack. Then I Stopped Using the Words It Was Watching For.
What a SIEM actually sees when an AI agent on your network gets attacked — and the three ceilings no detection rule can climb past
16 views
Daily Writeups
⤷ Title: Tetris Blaze: How a Phishing Kit builds Latin American Bank Fraud, piece by piece
════════════════════════
𐀪 Author: Kevin J Barrantes
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 21:49:20 GMT
════════════════════════
⌗ Tags: #threat_hunting #infosec #cybersecurity #threat_intelligence
Medium
Tetris Blaze: How a Phishing Kit builds Latin American Bank Fraud, piece by piece
Inside the phishing-as-a-service operation that clones banks across Latin America, relays one-time codes in real time, and turns a stolen…
14 views
Daily Writeups
⤷ Title: Splunk: Dashboards and Reports #TryHackMe [THM]
════════════════════════
𐀪 Author: CyberNaut-SM
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 22:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #siem #tryhackme_writeup #tryhackme #splunk
Medium
Splunk: Dashboards and Reports #TryHackMe [THM]
Complete Detailed Walkthrough. Hi, I am CyberNaut-SM.
17 views
Daily Writeups
⤷ Title: Securing API Communication in Google Cloud: Best Practices for Internal, B2B, and Cross-Cloud…
════════════════════════
𐀪 Author: Nasim Kabi
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 22:23:49 GMT
════════════════════════
⌗ Tags: #google_cloud_platform #cybersecurity #microservices #api_security #cloud_architecture
Medium
Securing API Communication in Google Cloud: Best Practices for Internal, B2B, and Cross-Cloud Integrations
Understanding private networking, HTTPS, OAuth 2.0, API keys, workload identity, and mutual TLS (mTLS) for secure enterprise API…
22 views