Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: SQL Injection: Retrieving Multiple Values in a Single Column
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:25:55 GMT
════════════════════════
⌗ Tags: #sql_injection #sql #burp #burpsuite #cybersecurity
Medium
SQL Injection: Retrieving Multiple Values in a Single Column💉
UNION-based SQLi PoC where we enumerate tables, extract usernames and passwords from the users table using string concatenation, and log in…
10 views
Daily Writeups
⤷ Title: SQL Injection: Finding a Column That Accepts String Data
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:15:15 GMT
════════════════════════
⌗ Tags: #burpsuite #sql_injection #sql #cybersecurity #burp
Medium
SQL Injection: Finding a Column That Accepts String Data
Finding which column accepts string data using a UNION-based SQL injection on the product category filter to display the lab’s provided…
10 views
Daily Writeups
⤷ Title: SQL Injection: Determining the Number of Columns Returned by the Query
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:33:49 GMT
════════════════════════
⌗ Tags: #sql #burp #burpsuite #sql_injection #cybersecurity
Medium
SQL Injection: Determining the Number of Columns Returned by the Query 💉
UNION-based SQLi to identify the exact number of columns returned by the application’s SQL query.
7 views
Daily Writeups
⤷ Title: SQL Injection: Listing the Database Contents on Oracle
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:29:08 GMT
════════════════════════
⌗ Tags: #sql #cybersecurity #sql_injection #burpsuite #burp
Medium
SQL Injection: Listing the Database Contents on Oracle💉
A clean Oracle-based UNION SQLi walkthrough where I enumerate tables, extract user credentials, and log in as administrator to solve the…
7 views
Daily Writeups
⤷ Title: Reflected Cross-Site Scripting: HTML Context (Nothing Encoded)
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 08:52:29 GMT
════════════════════════
⌗ Tags: #burp #reflected_xss #xs #cybersecurity #burpsuite
Medium
🎯 Reflected Cross-Site Scripting: HTML Context (Nothing Encoded)
Simple reflected XSS vulnerability where unencoded HTML context allows direct JavaScript execution via a <script> payload.
39 views
Daily Writeups
⤷ Title: Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
════════════════════════
𐀪 Author: MaMad
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 12:26:04 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty_tips #bug_bounty #burp
Medium
Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
When testing applications with Burp Suite, it’s easy to get overwhelmed by noisy traffic: analytics scripts, ads, assets, and external APIs…
27 views
Daily Writeups
⤷ Title: DOM XSS in innerHTML Sink (location.search → innerHTML)
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:19:25 GMT
════════════════════════
⌗ Tags: #cross_site_scripting #burp #burpsuite #cybersecurity #xs
Medium
DOM XSS in innerHTML Sink (location.search → innerHTML) 🎯
DOM-based XSS flaw where location.search is injected into the page via innerHTML, letting us execute arbitrary JavaScript.
60 views
Daily Writeups
⤷ Title: Exploiting an API endpoint using documentation — A Portswigger Lab
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 11:44:03 GMT
════════════════════════
⌗ Tags: #api_security #appsec #api_documentation #burp #burpsuite
Medium
Exploiting an API endpoint using documentation
Did you know?
41 views
Daily Writeups
⤷ Title: Finding and Exploiting an Unused API Endpoint — A PortSwigger Lab
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 14:46:03 GMT
════════════════════════
⌗ Tags: #api_endpoint #burp #api_security #burpsuite #appsec
Medium
Finding and Exploiting an unused API Endpoint
Unused or undocumented API endpoints can often be leveraged to break application logic
47 views
Daily Writeups
⤷ Title: Server Side Request Forgery (SSRF)
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 13:09:42 GMT
════════════════════════
⌗ Tags: #appsec #ssrf_attack #burpsuite #ssrf #burp
Medium
Server Side Request Forgery (SSRF)
A Portswigger lab
56 views