Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Win32 Callback Detouring Injection
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 21:45:18 GMT
════════════════════════
⌗ Tags: #infosec #malware #pentesting #hacking #cybersecurity
Medium
Win32 Callback Detouring Injection
Welcome to this new Medium post, in this one we will see an interesting continuation of one of the previous posts where we were talking…
6 views
Daily Writeups
⤷ Title: How I Bypassed Authentication on a Fintech Platform Using a Broken Password Reset Flow (Bug Bounty…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 19:09:16 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #bug_bounty_writeup #security #cybersecurity
Medium
How I Bypassed Authentication on a Fintech Platform Using a Broken Password Reset Flow (Bug Bounty Writeup)
I almost closed the tab on this program twice.
24 views
Daily Writeups
⤷ Title: IDOR via Comma-Injection: How Concatenating Two IDs Leaked Cross-Tenant PII
════════════════════════
𐀪 Author: s0ufm3l
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 20:14:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_bounty_tips #pentesting
Medium
IDOR via Comma-Injection: How Concatenating Two IDs Leaked Cross-Tenant PII
TL;DR: A permissions endpoint expected a single numeric user ID in one POST parameter. Sending two IDs separated by a comma — victim first…
12 views
Daily Writeups
⤷ Title: Writing Your First PIC Shellcode with Crystal Palace
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 21:00:10 GMT
════════════════════════
⌗ Tags: #red_team #malware #hacking #pentesting #infosec
Medium
Writing Your First PIC Shellcode with Crystal Palace
The previous post covered what Crystal Palace is and why it exists. This one is hands-on. We’re building two PICOs from scratch, a…
2 views
Daily Writeups
⤷ Title: When Strong Password Hashing Isn’t Enough: Chaining SQL Injection into Account Takeover
════════════════════════
𐀪 Author: Hossein Zarei
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 10:31:09 GMT
════════════════════════
⌗ Tags: #account_takeover #cybersecurity #sql_injection #pentesting #ethical_hacking
Medium
When Strong Password Hashing Isn’t Enough: Chaining SQL Injection into Account Takeover
Hello everyone 👋
5 views
Daily Writeups
⤷ Title: The SSRF That Wasn’t Supposed to Work Twice
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 20:16:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #pentesting #bug_bounty_writeup #security
Medium
The SSRF That Wasn’t Supposed to Work Twice
This one has a twist in it, so bear with the setup. The bug wasn’t hard to find. Getting it accepted was the actual fight.
6 views
Daily Writeups
⤷ Title: Apostrophe Has Abolished the Password
════════════════════════
𐀪 Author: Leonardo R Cavalcante
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 03:56:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_app_pentesting #bug_bounty_tips #bug_bounty #pentesting
Medium
Apostrophe Has Abolished the Password
The password was present.
13 views
Daily Writeups
⤷ Title: The Quiet SQLi Everyone Walks Past (And How to Catch It)
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #pentesting #bug_bounty #infosec
Medium
The Quiet SQLi Everyone Walks Past (And How to Catch It)
What’s up everyone! Nitin here 👋
22 views
Daily Writeups
⤷ Title: How a $5,000 “Low Severity” Bug Turned Into the Ultimate Admin Trap
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 14:04:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #pentesting #cybersecurity #penetration_testing #bug_bounty
Medium
How a $5,000 “Low Severity” Bug Turned Into the Ultimate Admin Trap
Every bug hunter knows the unwritten rule of public programs: if a target looks picked clean, you’re usually wasting your time.
9 views
Daily Writeups
⤷ Title: SunsetDecoy Walkthrough | proving Ground machine | Oscp prep
════════════════════════
𐀪 Author: Cybersecurity writeup's
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 15:01:03 GMT
════════════════════════
⌗ Tags: #pentesting #linux #ethical_hacking #cybersecurity #information_security
Medium
SunsetDecoy Walkthrough | proving Ground machine | Oscp prep
Sunset: Decoy Walkthrough
26 views