Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: File Upload Bypasses — The $10k Bug That Sneaks Past Filters (Part 2: Advanced)
════════════════════════
𐀪 Author: cyber-ninjaaa
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 08:24:43 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #bug_bounty_tips #hacking #bugs
Medium
File Upload Bypasses — The $10k Bug That Sneaks Past Filters (Part 2: Advanced)
Part 1 covered the basics. Double extensions. Null bytes. Content-Type spoofing.
22 views
Daily Writeups
⤷ Title: Why Finding a Bug Isn’t Enough: The Art of Writing a Good Bug Report
════════════════════════
𐀪 Author: Dasun Sooriyabandara
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 17:25:23 GMT
════════════════════════
⌗ Tags: #market_research_reports #bug_bounty #bugs #bug_report #bug_bounty_tips
Medium
🐞 Why Finding a Bug Isn’t Enough: The Art of Writing a Good Bug Report
Every QA engineer celebrates finding a bug. But here's the truth:
14 views
Daily Writeups
⤷ Title: Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 07:36:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #rce #bug_bounty_writeup #bug_bounty_tips #bugs
Medium
Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
1. Introduction
30 views
Daily Writeups
⤷ Title: When Your AI Assistant Has More Permissions Than You Do: An Access Control Bypass Story
════════════════════════
𐀪 Author: Ferdus Alam
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 12:13:49 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bugs #ai_security #bug_bounty_tips #ai_bug
Medium
When Your AI Assistant Has More Permissions Than You Do: An Access Control Bypass Story
The Setup
13 views
Daily Writeups
⤷ Title: Bypassing Enterprise SSO via a Forgotten Source Map: A Bug Bounty Story
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 09:40:18 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #hacker #bug_bounty_writeup #bugs
Medium
Bypassing Enterprise SSO via a Forgotten Source Map: A Bug Bounty Story
When you look at a bug bounty scope with 15+ root domains, it’s easy to get overwhelmed. Most hunters will fire off their automated…
21 views
Daily Writeups
⤷ Title: Real-World Business Logic Flaws: From Tiny Mistakes to Major Security Vulnerabilities
════════════════════════
𐀪 Author: Viodex
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 11:57:04 GMT
════════════════════════
⌗ Tags: #cybersecruity #hacking #research #business_logic_bug #bugs
Medium
Real-World Business Logic Flaws: From Tiny Mistakes to Major Security Vulnerabilities
In today’s bug bounty landscape, especially with the rise of AI traditional vulnerability classes such as SQL Injection, Cross-Site…
18 views
Daily Writeups
⤷ Title: Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:40:43 GMT
════════════════════════
⌗ Tags: #bug_bounty #rce #bug_bounty_writeup #bug_bounty_tips #bugs
Medium
Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
1. Introduction
34 views
Daily Writeups
⤷ Title: How I Systematically Find SQL Injection Bugs in Bug Bounty Programs (Step-by-Step Method)
════════════════════════
𐀪 Author: b0dj0x
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 17:00:40 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bugs #bug_bounty_writeup #bug_bounty
Medium
How I Systematically Find SQL Injection Bugs in Bug Bounty Programs (Step-by-Step Method)
SQLi is decades old and still one of the highest-paying bug classes in 2026 — here’s the exact recon-to-report process that actually finds…
23 views
Daily Writeups
⤷ Title: See What the Browser Can’t: A Beginner’s Guide to Burp Suite
════════════════════════
𐀪 Author: HritikaSunar
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 05:08:22 GMT
════════════════════════
⌗ Tags: #bugs #burpsuite #ethical_hacking #cybersecurity #web_security
Medium
See What the Browser Can’t: A Beginner’s Guide to Burp Suite
Hello, Cyber Explorer!
38 views
Daily Writeups
⤷ Title: Strix: The Open-Source AI Hacker That Finds and Fixes Your App and Website Vulnerabilities
════════════════════════
𐀪 Author: Tattva Tarang
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 07:56:40 GMT
════════════════════════
⌗ Tags: #bugs #apps #website #bug_bounty #ai
Medium
Strix: The Open-Source AI Hacker That Finds and Fixes Your App and Website Vulnerabilities
Security testing has always had an annoying problem. You can run static analyzers. You can scan dependencies.
26 views