Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection Attack, Querying the Database Type and Version on Oracle
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 10:37:37 GMT
════════════════════════
⌗ Tags: #web_security #infosec #portswigger #sql_injection #cybersecurity
Medium
PortSwigger Lab: SQL Injection Attack, Querying the Database Type and Version on Oracle
Difficulty: Practitioner
10 views
Daily Writeups
⤷ Title: What Is Bug Bounty Hunting and How Does It Work?
════════════════════════
𐀪 Author: Qnayds
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 10:38:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #ethical_hacking #information_security
Medium
What Is Bug Bounty Hunting and How Does It Work?
Every website or application can have security weaknesses, even when it has been developed by an experienced team. A small mistake in the…
18 views
Daily Writeups
⤷ Title: When a UI API Becomes a Security Boundary
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
Medium
When a UI API Becomes a Security Boundary
Somewhere in your Next.js app there’s probably a function call that looks harmless. You pass it a JSX element — a title, a background…
12 views
Daily Writeups
⤷ Title: Access control vulnerabilities
════════════════════════
𐀪 Author: Divin Lory
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 11:28:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_vapt
Medium
Access control vulnerabilities
Access control is basically deciding who’s allowed to do what.
18 views
Daily Writeups
⤷ Title: I Built a Tool That Finds Bug Bounty Programs Across 4 Platforms
════════════════════════
𐀪 Author: M Umer Saqib
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:36:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #ethical_hacking #bug_bounty #web_security
Medium
I Built a Tool That Finds Bug Bounty Programs Across 4 Platforms
Subtitle: A simple web app that searches HackerOne, Bugcrowd, Intigriti and YesWeHack by in-scope asset, all in one place.
11 views
Daily Writeups
⤷ Title: When PKCE Isn’t Enough: How an OAuth Redirect URI Flaw Can Lead to Account Takeover
════════════════════════
𐀪 Author: Sanaullah Aman Korai
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:29:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #web_security #bug_bounty #oauth
Medium
When PKCE Isn’t Enough: How an OAuth Redirect URI Flaw Can Lead to Account Takeover
PKCE protects authorization codes from interception. But what happens when an identity provider sends the code to the wrong destination?
9 views
Daily Writeups
⤷ Title: Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 18:44:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #Laravel #php #TokenGuard #Web Security
Daily CyberSecurity
Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User
TL;DR Laravel published two security advisories on October 19, 2026. The more serious one is a critical Laravel authentication bypass in TokenGuard, rated CVSS 9.2, that can lead to account takeov…
21 views
Daily Writeups
⤷ Title: Why developers should never trust a null origin (Portswigger CORS lab #2 )
════════════════════════
𐀪 Author: Mohamed Dwedar
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 17:12:01 GMT
════════════════════════
⌗ Tags: #web_security_testing #portswigger #cybersecurity #bug_bounty
Medium
Why developers should never trust a null origin ( Portswigger CORS lab #2 )
Why developers should never trust a null origin ( Portswigger CORS lab #2 ) ( lab #2 cors vulnerability with trusted null origin ) everything is the same in terms of the source code and the workflow …
17 views
Daily Writeups
⤷ Title: Command Injection: When the Shell Runs Your Input
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:55:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #cybersecurity #ethical_hacking #bug_bounty
Medium
Command Injection: When the Shell Runs Your Input
From ;id to JVM diagnostics, every way an OS command sneaks in.
8 views
Daily Writeups
⤷ Title: My HTB CWES Journey: Taking One Step at a Time
════════════════════════
𐀪 Author: m1000z
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 19:57:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing #cwe #hackthebox
Medium
My HTB CWES Journey: Taking One Step at a Time
Passing Hack The Box’s Certified Web Exploitation Specialist (CWES) was a milestone in my web penetration testing journey. It tested my…
33 views