Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 13:39:14 GMT
———————————————
✏️Title: Race Condition Vulnerability Explained: The Train Station Analogy
———————————————
📎Link: https://medium.com/p/ad88cb3a3325
———————————————
Tags: #information_security #web #ethical_hacking #cybersecurity #penetration_testing
Medium
Race Condition Vulnerability Explained: The Train Station Analogy
Imagine you’re at a busy train station, standing in front of two ticket machines. These machines are positioned side by side, and both access the same central database to check the availability of…
26 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 13:37:08 GMT
———————————————
✏️Title: Understanding SQL Injection Through the Lens of a Library
———————————————
📎Link: https://medium.com/p/a9546027f66b
———————————————
Tags: #information_security #penetration_testing #cybersecurity #web #ethical_hacking
Medium
Understanding SQL Injection Through the Lens of a Library
Imagine a vast library, filled with countless books, journals, and manuscripts. This library is a cherished resource for a town, and people from all walks of life visit to borrow books or gather…
42 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 13:37:01 GMT
———————————————
✏️Title: Metasploit Framework Notes
———————————————
📎Link: https://medium.com/p/53dd5a63b1ba
———————————————
Tags: #metasploit_framework #metasploit #cybersecurity
Medium
Metasploit Framework Notes
This document contains notes on how to use Metasploit during the stages of a pentetration test. It also includes basics on how to search…
34 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 13:36:23 GMT
———————————————
✏️Title: Cross-Site Scripting (XSS) Explained with an Analogy: The Poisoned Candy
———————————————
📎Link: https://medium.com/p/93050254f96b
———————————————
Tags: #ethical_hacking #penetration_testing #information_security #web #cybersecurity
Medium
Cross-Site Scripting (XSS) Explained with an Analogy: The Poisoned Candy
Imagine the internet as a vast candy store, where websites are different candy stalls, and the candies represent the content you interact with. Cross-Site Scripting, commonly abbreviated as XSS, is a…
42 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 14:54:21 GMT
———————————————
✏️Title: Time-Traveling for Money: Discovering Secrets in Vintage JavaScript Files
———————————————
📎Link: https://medium.com/p/7deece114b93
———————————————
Tags: #hacking #bug_bounty #bug_bounty_tips #hacking_tools #hackerone
Medium
Time-Traveling for Money: Discovering Secrets in Vintage JavaScript Files
Are you ready for an exciting digital adventure? Get ready to embark on a journey where hidden secrets and old code may lead you to…
41 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 12:42:50 GMT
———————————————
✏️Title: EC2 User-data to RCE
———————————————
📎Link: https://medium.com/p/f601264a75c2
———————————————
Tags: #cloud_security #pentesting #bug_bounty #cybersecurity #aws
Medium
EC2 User-data to RCE
Hi Guys, Today we are going to see how a single AWS misconfiguration can lead to remote code execution on an EC2 instance. In the upcoming…
40 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 11:53:57 GMT
———————————————
✏️Title: How to Crush BSCP Exam in 75 Mins — BSCP Review
———————————————
📎Link: https://medium.com/p/0b207a17e26d
———————————————
Tags: #penetration_testing #pentesting #web_security #burpsuite #certification
Medium
How to Crush BSCP Exam in 75 Mins — BSCP Review
Hi, I’m Ossama Yasser, and this is a guide to pass the Burp Suite Certified Practitioner Exam (BSCP) easily.
👍1
78 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 11:52:29 GMT
———————————————
✏️Title: Advanced directory traversal attacks against Linux
———————————————
📎Link: https://medium.com/p/6a9a7ab27766
———————————————
Tags: #linux #pentesting #dotnet #cybersecurity
Medium
Advanced directory traversal attacks against Linux
What is a directory traversal attack?
40 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Wed, 25 Oct 2023 15:51:48 GMT
———————————————
✏️Title: Application Security in SSDLC
———————————————
📎Link: https://medium.com/p/a778205ac810
———————————————
Tags: #ssdlc #application_security
Medium
Application Security in SSDLC
In my previous blog, as I stated the high level explanation of Application Security, in this one I will be stating how it can be…
23 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 14:43:56 GMT
———————————————
✏️Title: Write-Up/RootMe
———————————————
📎Link: https://medium.com/p/d6ca6adc313b
———————————————
Tags: #ctf_walkthrough #hacking #tryhackme_writeup #ctf_writeup #tryhackme_walkthrough
Medium
Write-Up/RootMe
We will start by scanning the IP using NMAP:
30 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 13:25:52 GMT
———————————————
✏️Title: THM-RootMe Writeup
———————————————
📎Link: https://medium.com/p/05ef0f922c5f
———————————————
Tags: #coding #hacking #tryhackme_rootme #root_me #cybersecurity
Medium
THM-RootMe Writeup
ROOM NAME: RootMe
27 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 12:37:18 GMT
———————————————
✏️Title: List Processes Modules Classic Technique
———————————————
📎Link: https://medium.com/p/e43f844c75b8
———————————————
Tags: #development #programming #hacking #cybersecurity #malware
Medium
List Processes Modules Classic Technique
As a red teamer with expertise in malware development, I often find myself at the forefront of cybersecurity strategies. In this article…
30 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 14:41:26 GMT
———————————————
✏️Title: Step 1: To get a reverse shell, go to the IP address.
———————————————
📎Link: https://medium.com/p/f0e680bddba0
———————————————
Tags: #tryhackme #root_me #ctf
Medium
Step 1: To get a reverse shell, go to the IP address.
Step 2: Open link https://github.com/pentestmonkey/php-reverse-shell and download php-reverse-shell.
35 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 14:04:32 GMT
———————————————
✏️Title: TryHackMe: RootMe Detailed CTF Writeup
———————————————
📎Link: https://medium.com/p/b0d8c4485745
———————————————
Tags: #ctf_walkthrough #ctf #tryhackme #ctf_writeup
Medium
TryHackMe: RootMe Detailed CTF Writeup
Task 1 — Deploy the Machine
36 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 16:28:01 GMT
———————————————
✏️Title: Open Source Intelligence (OSINT): Unveiling the Secrets of the Digital World
———————————————
📎Link: https://medium.com/p/0d15810fedf4
———————————————
Tags: #osint #information_gathering #recon #reconnaissance
Medium
Open Source Intelligence (OSINT): Unveiling the Secrets of the Digital World
In today’s information age, knowledge is power. Open Source Intelligence (OSINT) is a fascinating discipline that empowers individuals and organizations with the ability to collect, analyze, and…
36 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 17:47:07 GMT
———————————————
✏️Title: InfoSecSherpa’s News Roundup for Sunday, October 29, 2023
———————————————
📎Link: https://medium.com/p/8cad98a69e5a
———————————————
Tags: #cybersecurity #information_security #news #cyber #infosec
Medium
InfoSecSherpa’s News Roundup for Sunday, October 29, 2023
InfoSecSherpa: Your Guide Up a Mountain of Information!
31 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 17:33:41 GMT
———————————————
✏️Title: “THM- rootME Writeup by Aima Asghar”
———————————————
📎Link: https://medium.com/p/6024d856967c
———————————————
Tags: #cybersecurity #internet #security #computer_science #hacking
Medium
“THM- rootME Writeup by Aima Asghar”
I was assigned a target IP address of 10.10.161.64.
25 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 17:24:43 GMT
———————————————
✏️Title: THM-RootME Guide
———————————————
📎Link: https://medium.com/p/798d7b834b5d
———————————————
Tags: #linux #thm #cybersecurity
Medium
THM-RootME Guide
Before Starting:
As usual, we need to start OpenVPN first in the terminal to access any machines/rooms on THM.
35 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 17:20:12 GMT
———————————————
✏️Title: A deep dive ofNOSQLi
———————————————
📎Link: https://medium.com/p/2ebaa678d72c
———————————————
Tags: #programming #technology #pentesting #tech #cybersecurity
Medium
A deep dive ofNOSQLi
Introduction
21 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 16:43:34 GMT
———————————————
✏️Title: Cybersecurity Weekly Issue 23
———————————————
📎Link: https://medium.com/p/62f1e0e3bbd0
———————————————
Tags: #cybersecurity_news #cybersecurity #technology #security #tech
Medium
Cybersecurity Weekly Issue 23
The 23rd issue of Cybersecurity Weekly, which curates the latest cybersecurity industry news.
24 views
Daily Writeups
🔖New Writeup❗️
———————————————
🗓Date: Sun, 29 Oct 2023 16:36:40 GMT
———————————————
✏️Title: Web Sockets in Web App Penetration Testing | 2023
———————————————
📎Link: https://medium.com/p/cdc18850921b
———————————————
Tags: #careers #penetration_testing #cybersecurity #bug_bounty #hacking
Medium
Web Sockets in Web App Penetration Testing | 2023
In this section, we’ll explain what Web sockets is, describe some types, explain how to find and exploit various kinds of Web sockets and…
20 views