Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Why API access can survive logout
════════════════════════
𐀪 Author: Mehmet Sinan TATAR
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 08:26:31 GMT
════════════════════════
⌗ Tags: #apps #mobile_app_development #security #application_security #web_development
Medium
Why API access can survive logout
Token revocation, refresh requests, and the point where a web or mobile session actually ends.
13 views
Daily Writeups
⤷ Title: Blind OS Command Injection With Out-of-Band Interaction
════════════════════════
𐀪 Author: Kaustubh Asthana
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 08:32:20 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #cybersecurity #web_penetration_testing #portswigger
Medium
Blind OS Command Injection With Out-of-Band Interaction
Proving a command executed when the application never shows you the result
20 views
Daily Writeups
⤷ Title: WorldWAP — TryHackMe Writeup
════════════════════════
𐀪 Author: Shahadat Fahim
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 09:05:37 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #web_security #xs #bug_bounty
Medium
WorldWAP — TryHackMe Writeup
Category: Client-Side Exploitation (Stored XSS · Cookie Theft · CORS/CSRF · Same-Origin Exfiltration)
11 views
Daily Writeups
⤷ Title: Why Cybersecurity Skills Are Becoming Important in Kerala
════════════════════════
𐀪 Author: Qnayds
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 09:22:54 GMT
════════════════════════
⌗ Tags: #web_security #information_security #kerala #ethical_hacking #cybersecurity
Medium
Why Cybersecurity Skills Are Becoming Important in Kerala
Kerala has a growing number of businesses, educational institutions, startups, and professionals who depend on digital technology. From…
26 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection Attack, Querying the Database Type and Version on Oracle
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 12:21:01 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity #infosec #portswigger
Medium
PortSwigger Lab: SQL Injection Attack, Querying the Database Type and Version on MySQL and Microsoft
PortSwigger Lab: SQL Injection Attack, Querying the Database Type and Version on MySQL and Microsoft Difficulty: Practitioner Target: PortSwigger Web Security Academy Objective The objective of this …
22 views
Daily Writeups
⤷ Title: Testing VulnBank Against the OWASP Top 10 2025
════════════════════════
𐀪 Author: Stephen Onyango
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 11:46:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnbank #cybersecurity #owasp_top_10 #web_security
Medium
Testing VulnBank Against the OWASP Top 10 2025
Introduction
25 views
Daily Writeups
⤷ Title: Blind OS Command Injection With Out-of-Band Data Exfiltration
════════════════════════
𐀪 Author: Kaustubh Asthana
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 13:26:38 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #cybersecurity #web_penetration_testing #portswigger
Medium
Blind OS Command Injection With Out-of-Band Data Exfiltration
Not just proving a command ran, but reading its output through DNS
34 views
Daily Writeups
⤷ Title: Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:08:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #web_security #ethical_hacking
Medium
Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
How a ../ in a URL parameter turns into CSRF, cache deception, and account takeover.
16 views
Daily Writeups
⤷ Title: Just Ask: Exploiting Excessive Agency in an LLM
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 17:45:50 GMT
════════════════════════
⌗ Tags: #portswigger_lab #api_security #llm_security #excessive_agency #web_llm_attacks
Medium
Just Ask: Exploiting Excessive Agency in an LLM
From customer support chat to database deletion: following the tools in a PortSwigger Web LLM lab.
30 views
Daily Writeups
⤷ Title: PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 23:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #php #Remote Code Execution #watchTowr #Web Security
Daily CyberSecurity
PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
TL;DR The PHP team will ship a security release on October 21, 2026, at 14:00 UTC to fix two critical flaws rated CVSS v4.0 9.2. Leaks tie them to CVE-2026-109618 and CVE-2026-109619, described as…
14 views