Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: PHPShell: The rise of branded vulnerabilities
════════════════════════
𐀪 Author: Geva Solomonovich
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:37:09 GMT
════════════════════════
⌗ Tags: #application_security #artificial_intelligence #php2shell #cybersecurity #vulnerability
Medium
PHPShell: The rise of branded vulnerabilities
PHP2Shell, and why taking the internet offline is not an acceptable mitigation
28 views
Daily Writeups
⤷ Title: PHP2Shell: Taking Production Offline Cannot Become the New Normal
════════════════════════
𐀪 Author: Lotem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:37:40 GMT
════════════════════════
⌗ Tags: #exploitation #exploit #application_security #php2shell #cybersecurity
Medium
PHP2Shell: Taking Production Offline Cannot Become the New Normal
PHP2Shell shows how AI is changing the economics of exploitation, and why application defense must learn, reason, and adapt at machine…
13 views
Daily Writeups
⤷ Title: A Vulnerability Scan is Not an Application Security Program
════════════════════════
𐀪 Author: Arthur Steel | Contra Average
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 19:36:49 GMT
════════════════════════
⌗ Tags: #owasp #risk_management #software_development #cybersecurity #application_security
Medium
A Vulnerability Scan is Not an Application Security Program
Your scanner may be working perfectly. Your security strategy may still be dangerously incomplete.
15 views
Daily Writeups
⤷ Title: PART II — Complete Guide on mTLS for Interviews and Penetration Testing
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 21:01:41 GMT
════════════════════════
⌗ Tags: #penetration_testing #application_security #interview #hackerone #mtls_authentication
Medium
PART II — Complete Guide on mTLS for Interviews and Penetration Testing
In the previous article, we touched upon the basics of certificates, mTLS, x509 standard for certificates, along with public and private…
23 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:41:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #application_security #penetration_testing
Medium
🔪🧬🔓💥 HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
The bug class scanners love to “detect” and almost never prove — and why 2025 quietly made it deadlier than it has ever been.
12 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:21:20 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_architecture #enterprise_architecture #cloud_security
Medium
Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and the PMO-Meets-ADM Engine
Part 3 of 3 in the series “Security Requirements That Actually Work”
10 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:19:36 GMT
════════════════════════
⌗ Tags: #enterprise_architecture #software_architecture #application_security #cloud_security #cybersecurity
Medium
Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
Part 2 of 3 in the series “Security Requirements That Actually Work”
12 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:16:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #enterprise_architecture #software_architecture #application_security
Medium
Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security Requirement
Part 1 of 3 in the series “Security Requirements That Actually Work”
10 views
Daily Writeups
⤷ Title: From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
════════════════════════
𐀪 Author: cyb3rD1vvy@
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 06:27:14 GMT
════════════════════════
⌗ Tags: #application_security #ethical_hacking #cybersecurity #bug_bounty_writeup #web_security
Medium
From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
Series: From P4 to P1: The Bug Hunter’s Journey Day: 01/30 Topic: P4 Findings, Manual Validation, and Report Quality
19 views
Daily Writeups
⤷ Title: AI Coding Agents Pass Tests, Not Security Checks
════════════════════════
𐀪 Author: Emre Gültekir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:09:03 GMT
════════════════════════
⌗ Tags: #programming #application_security #artificial_intelligence #ai_agent #software_testing
Medium
A Green Test Only Answers the Question You Asked
Coding agents pass up to 91% of functional tests but only 25% are also secure. Why green tests miss this and how to put attacks in the spec.
19 views