Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Server-Side Template Injection (SSTI) to Remote Code Execution (RCE): A Visual Guide for Pentesters…
════════════════════════
𐀪 Author: Kondibajogdand
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 05:41:00 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #web_security #ethical_hacking #web_application_security #security
Medium
Server-Side Template Injection (SSTI) to Remote Code Execution (RCE): A Visual Guide for Pentesters and Developers
🎬 The Scene: A “Harmless” Name Field
8 views
Daily Writeups
⤷ Title: THE DOOR Penetration Testing | SQLi → Authentication Bypass → Command Injection
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 09:33:21 GMT
════════════════════════
⌗ Tags: #hacking #web_development #cybersecurity #artificial_intelligence #bug_bounty
Medium
🔥 THE DOOR Penetration Testing | SQLi → Authentication Bypass → Command Injection
Web application vulnerabilities rarely exist in isolation.
7 views
Daily Writeups
⤷ Title: {{7*7}} = 49: A Bug Hunter’s Guide to Server-Side Template Injection
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:26:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #web_development #bug_bounty_writeup
Medium
{{7*7}} = 49: A Bug Hunter’s Guide to Server-Side Template Injection
How “Hello, {name}” turns into remote code execution.
19 views
Daily Writeups
⤷ Title: VULNBANK API SECURITY ASSESSMENT
════════════════════════
𐀪 Author: Lh1l0v3
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:11:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #software_engineering #software_development #web_development
Medium
VULNBANK API SECURITY ASSESSMENT
PART 4 — When Internal Endpoints Become Part of the Public API Surface
9 views
Daily Writeups
⤷ Title: From a Single WAF Bypass to 58,000+ Exposed Media Objects
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:51:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_application_security #penetration_testing #information_security
Medium
From a Single WAF Bypass to 58,000+ Exposed Media Objects
A bug bounty case study in chaining overlooked misconfigurations into a full attack surface
26 views
Daily Writeups
⤷ Title: My First Valid Bug: A Broken Object Level Authorization (BOLA) in Customer API
════════════════════════
𐀪 Author: Abobakrmohamed
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:20:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunter #web_app_pentesting #hacking #find_your_first_bug
Medium
My First Valid Bug: A Broken Object Level Authorization (BOLA) in Customer API
After months of grinding through labs, courses, and public program testing without a confirmed finding, I finally landed my first valid bug…
22 views
Daily Writeups
⤷ Title: Créer un Point d’Accès Wi-Fi WPA2 Professionnel avec dnsmasq, hostapd, iptables, PMF et PMFC
════════════════════════
𐀪 Author: ATTE-THM
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 13:39:29 GMT
════════════════════════
⌗ Tags: #hacking #dhcp #linux #networking #web_development
14 views
Daily Writeups
⤷ Title: I Thought I Understood HTTP — Then I Opened Burp Suite
════════════════════════
𐀪 Author: Taoqui
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 13:59:28 GMT
════════════════════════
⌗ Tags: #https #ethical_hacking #web_security #cybersecurity #burpsuite
Medium
I Thought I Understood HTTP — Then I Opened Burp Suite
A hands-on journey into HTTP requests, responses, headers, cookies, and web application security.
23 views
Daily Writeups
⤷ Title: PortSwigger File Path Traversal Lab Solution, Simple Case
════════════════════════
𐀪 Author: Arham H.B
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:26:43 GMT
════════════════════════
⌗ Tags: #portswigger #portswigger_lab #web_security #cybersecurity #bug_bounty
Medium
PortSwigger File Path Traversal Lab Solution, Simple Case
Web Security Academy by PortSwigger
8 views
Daily Writeups
⤷ Title: Hammer (THM) — Rate Limits JWT Forgery
════════════════════════
𐀪 Author: Dr.Vixar
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:37:21 GMT
════════════════════════
⌗ Tags: #jwt #tryhackme #web_exploitation #hammer #thm_writeup
Medium
Hammer(THM) — Rate Limits JWT Forgery
Hammer(THM) — Rate Limits JWT Forgery A web exploitation writeup covering directory fuzzing, password-reset brute forcing, rate-limit bypass via IP spoofing, command injection, and JWT key …
8 views