Daily Writeups
@Daily_Writeups
3.99K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.99K subscribers
Daily Writeups
⤷ Title: A Photo Upload Field, a Stolen Metadata Token, and Three Weeks of Silence
════════════════════════
𐀪 Author: Victorayangunna
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 00:16:20 GMT
════════════════════════
⌗ Tags: #ssrf #mitre_attack #cybersecurity #cloud_security #incident_response
Medium
A Photo Upload Field, a Stolen Metadata Token, and Three Weeks of Silence
Turning each week of my cloud security internship into a concept, the hands-on work behind it, and the incident that shows why it matters
25 views
Daily Writeups
⤷ Title: Four SSRF Bypasses in Four Months
════════════════════════
𐀪 Author: Mostafa Moradian
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 08:00:49 GMT
════════════════════════
⌗ Tags: #security #webassembly #ressrf #ssrf #rust
Medium
Four SSRF Bypasses in Four Months
Why Your Blocklist Was Never Going to Work
45 views
Daily Writeups
⤷ Title: From “Won’t Fix” to $$$$: How I Bypassed Google’s SSRF Filters Using an IPv6-Mapped Address
════════════════════════
𐀪 Author: Nitin Attri
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 15:42:03 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #vulnerability #ssrf_bypass #bug_bounty
Medium
From “Won’t Fix” to $$$$: How I Bypassed Google’s SSRF Filters Using an IPv6-Mapped Address
Hello everyone, I’m Nitin Attri! I spend my time hunting bugs, bypassing filters, and helping organizations secure their infrastructure.
17 views
Daily Writeups
⤷ Title: Non-Blind SSRF via Avatar-from-URL: Reaching Loopback Services and Reading the Response
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 12:46:20 GMT
════════════════════════
⌗ Tags: #ssrf #bug_bounty #penetration_testing
Medium
Non-Blind SSRF via Avatar-from-URL: Reaching Loopback Services and Reading the Response
CWE-918: Server-Side Request Forgery CVSS 3.1: 7.7 (High) — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
25 views
Daily Writeups
⤷ Title: When an MLflow Patch Is Not the End of the Cloud Risk
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 07:47:05 GMT
════════════════════════
⌗ Tags: #ssrf #mlflow #cloud_security #mlops_security #cloud_iam
Medium
When an MLflow Patch Is Not the End of the Cloud Risk
The buyer’s guide to deciding whether an SSRF alert is a patching task, an incident investigation, or a cloud penetration test
43 views
Daily Writeups
⤷ Title: SSRF: The Complete Interview-Ready Breakdown (and Why the Standard Defense Keeps Losing)
════════════════════════
𐀪 Author: Prianshu Bhaskar
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 09:32:10 GMT
════════════════════════
⌗ Tags: #application_security #interview_questions #web_application_security #ssrf #owasp_top_10
Medium
SSRF: The Complete Interview-Ready Breakdown (and Why the Standard Defense Keeps Losing)
Part of my Application Security Fundamentals series.
25 views
Daily Writeups
⤷ Title: SSRF
════════════════════════
𐀪 Author: Sourabh Jala
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #vulnerability #ethical_hacking #ssrf #cybersecurity
Medium
SSRF
INTERNAL REQUEST PIVOT
22 views
Daily Writeups
⤷ Title: HauntMart Web Challenge (Easy Difficulty)
════════════════════════
𐀪 Author: Joseph "n3m0” KANKO
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:53:13 GMT
════════════════════════
⌗ Tags: #ctf #web_development #ssrf #ctf_writeup #ssrf_walkthrough
Medium
HauntMart Web Challenge (Easy Difficulty)
Hello everyone, and welcome to this write-up for the “HauntMart” web challenge, which is rated as easy.
33 views
Daily Writeups
⤷ Title: Stop Writing Regexes for IP Security: SSRF Protection Is a Network Semantics Problem
════════════════════════
𐀪 Author: Berkan SAL
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 19:47:58 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #ssrf #vulnerability_research #security_research
Medium
Stop Writing Regexes for IP Security: SSRF Protection Is a Network Semantics Problem
IP addresses are not strings with dots and colons. Treating them that way is how SSRF defenses develop blind spots.
37 views
Daily Writeups
⤷ Title: Crashing a Webhook Endpoint by Disguising an IP Address — $100 Bounty
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 09:03:27 GMT
════════════════════════
⌗ Tags: #webhooks #bug_boun #ssrf #bugbounty_writeup #cybersecurity
Medium
Crashing a Webhook Endpoint by Disguising an IP Address — $100 Bounty
What This Bug Is, in Plain Words
46 views