Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: HTB: Validation (Askia DeLarge)
════════════════════════
𐀪 Author: Askia DeLarge
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 18:37:38 GMT
════════════════════════
⌗ Tags: #htb #ctf #sql_injection #web_exploitation #cybersecurity
Medium
HTB: Validation (Askia DeLarge)
Author: Askia DeLarge  OS: Linux  Difficulty: Easy
9 views
Daily Writeups
⤷ Title: How to Detect SQL Injection — step by step instruction
════════════════════════
𐀪 Author: Demianchuk Sergii
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 14:20:32 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity
Medium
How to Detect SQL Injection — step by step instruction
Hi, below you may find a short instructions how to detect SQL injections at your application.
7 views
Daily Writeups
⤷ Title: Master SQL Injection: Exploit Hyperpure’s $2000 Bounty Vulnerability
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:41:54 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #sql_injection #technology #bug_bounty #report
Medium
Master SQL Injection: Exploit Hyperpure’s $2000 Bounty Vulnerability
Discover How to Find and Fix This Dangerous Web Flaw
9 views
Daily Writeups
⤷ Title: SQL Injection (SQLi): A Comprehensive Guide
════════════════════════
𐀪 Author: Meravytes
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 17:38:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #meravytes #infosec #bug_bounty #sql_injection
Medium
SQL Injection (SQLi): A Comprehensive Guide
SQL Injection (SQLi) is one of the most prevalent and dangerous vulnerabilities in web applications. It allows an attacker to interfere…
10 views
Daily Writeups
⤷ Title: Why I Stopped Hating SQL (and Started Solving Crimes With It)
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 05:56:21 GMT
════════════════════════
⌗ Tags: #web_application_security #web_based_applications #learning_and_development #sql_injection #sql
Medium
Why I Stopped Hating SQL (and Started Solving Crimes With It)
A Developer’s Journey From “SELECT * Hell” to Set-Based Zen
12 views
Daily Writeups
⤷ Title: SQL Injection in 2025: Why This Zombie Threat Keeps Rising from the Grave
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 16:20:18 GMT
════════════════════════
⌗ Tags: #devsecops #web_security #sql_injection #cyberattack #owasp
Medium
Home Invasions in Web Security Continue to Rise: SQL Injection Declines to Comment
Why SQL Injection Still Happens in 2025 — and How to Stop It for Good”
15 views
Daily Writeups
⤷ Title: Enumerate MySQL database server using UNION SQL injection
════════════════════════
𐀪 Author: digistam
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 08:08:34 GMT
════════════════════════
⌗ Tags: #sql_injection #ethical_hacking
Medium
Enumerate MySQL database server using UNION SQL injection
While I’m a big fan of SQLmap and many tutorials rely on it, I’m more motivated to dive deeper into the fundamentals of SQL injection, as…
19 views
Daily Writeups
⤷ Title: Websocket response manipulation leads to access admin panel (Arabic)
════════════════════════
𐀪 Author: rood
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 13:52:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
Medium
Websocket response manipulation leads to access admin panel (Arabic)
وأنا أشتغل على هدف في برنامج باونتي، وصلت لموقع فرعي شكله عادي، بس بعد ما تصفحته شوي لاحظت إن فيه نظام صلاحيات، يعني المستخدمين مو كلهم نفس…
14 views
Daily Writeups
⤷ Title: ️ How I Took Over an Account by Bypassing Email Verification – A Privilege Escalation Story
════════════════════════
𐀪 Author: WhoAdnan
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 06:20:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #bug_bounty_writeup
Medium
🛡️ How I Took Over an Account by Bypassing Email Verification – A Privilege Escalation Story
Every now and then, while exploring platforms for fun or bounties, you stumble upon a vulnerability so straightforward it almost feels…
15 views
Daily Writeups
⤷ Title: Exposure Protocol: Information Disclosure in the Wild [Part 4] ️
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 21:28:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #backup #bug_bounty_tips #cybersecurity
Medium
Exposure Protocol: Information Disclosure in the Wild [Part 5] 🔍🗃️
Source Code Disclosure via Backup Files — Hunting Sensitive Data Left in the Wild. Automates discovery of leaked backup files via…
17 views
Daily Writeups
⤷ Title: OAuth Open Redirect to ATO: One Link, All Platforms Compromised
════════════════════════
𐀪 Author: Abdo Rabea (H4reeqa)
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 18:30:10 GMT
════════════════════════
⌗ Tags: #oauth #bug_bounty_writeup #open_redirect #bug_bounty #account_takeover
Medium
OAuth Open Redirect to ATO: One Link, All Platforms Compromised
On Public Bug Bounty Program
20 views
Daily Writeups
⤷ Title: One-Click Account Vulnerability: How I Discovered a Dangerous Authentication Flaw in a Global…
════════════════════════
𐀪 Author: Elie Attieh
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 10:44:05 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #cybersecurity #bug_bounty_writeup #bug_bounty
Medium
One-Click Account Vulnerability: How I Discovered a Dangerous Authentication Flaw in a Global E-Commerce Giant
💬 Subtitle
13 views
Daily Writeups
⤷ Title: Zero Click Mass Account Takeover on Exchange
════════════════════════
𐀪 Author: Erfan Tavakoli
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:35:24 GMT
════════════════════════
⌗ Tags: #account_takeover #exchange #bug_bounty_tips #bug_bounty #bug_bounty_writeup
Medium
Zero Click Mass Account Takeover on Exchange
Hey everyone, I’m Erfan (Maverick). In this write-up, I’m going to show you how I discovered a vulnerability that I’ve named “Zero Click…
17 views
Daily Writeups
⤷ Title: How I Took a Website Completely Offline with a Funky Cache Poisoning Vulnerability (CPDOS)
════════════════════════
𐀪 Author: Erfan Tavakoli
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:21:54 GMT
════════════════════════
⌗ Tags: #writeup #penetration_testing #bug_bounty_tips #bug_bounty #bug_bounty_writeup
Medium
How I Took a Website Completely Offline with a Funky Cache Poisoning Vulnerability (CPDOS)
Hey everyone, Erfan here! In this write-up, I want to share a fun story about a cache poisoning vulnerability I found that led to a…
17 views
Daily Writeups
⤷ Title: Broken Access Control via Hardcoded Bearer Token in Public JS File
════════════════════════
𐀪 Author: nooh zidan
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 19:40:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_bounty_writeup #api #bug_bounty_tips
Medium
Broken Access Control via Hardcoded Bearer Token in Public JS File 💥
بِسْمِ اللَّـهِ الرَّحْمَٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ الْمَبْعُوثِ رَحْمَةً لِلْعَالَمِينَ ﷺ
21 views
Daily Writeups
⤷ Title: CVE-2025–0133 Made Easy — Find Vulnerable Assets in 2 Minutes
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 06:45:26 GMT
════════════════════════
⌗ Tags: #fofa #shodan #global_protect #recon
Medium
💥 CVE-2025–0133 Made Easy — Find Vulnerable Assets in 2 Minutes
You don’t need fancy tools.  You just need good eyes and the right search queries.  Here’s how I easily find real targets for…
16 views
Daily Writeups
⤷ Title: Bypassing Badge Authentication in an ICS Environment
════════════════════════
𐀪 Author: Stoic_Gang
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 10:49:04 GMT
════════════════════════
⌗ Tags: #scada #recon #node_red #ot_security #tryhackme_walkthrough
Medium
Bypassing Badge Authentication in an ICS Environment
No credentials, no shell, no brute force, just a browser and a hunch.
This TryHackMe room was a clever twist on classic enumeration: find a…
22 views
Daily Writeups
⤷ Title: FOFA Dorking | Part 8
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Tue, 24 Jun 2025 09:29:48 GMT
════════════════════════
⌗ Tags: #pentesting #fofa_dorking #bug_hunting #recon #fofa
Medium
FOFA Dorking | Part 8
Finding unauth dashboards using FOFA Search Engine
16 views
Daily Writeups
⤷ Title: Simple manual recon leads to P1 finding and uncovering AWS access and secret keys
════════════════════════
𐀪 Author: Abdalah
════════════════════════
ⴵ Time: Sun, 22 Jun 2025 13:19:55 GMT
════════════════════════
⌗ Tags: #bug_hunting #penetration_testing #bug_bounty_writeup #bug_bounty #recon
Medium
Simple manual recon leads to P1 finding and uncovering AWS access and secret keys
The finding is related to private program on bugcrowd so let us call it target.com 
I have previously (about 2 years ago )reported p1 to…
13 views
Daily Writeups
⤷ Title: Websocket response manipulation leads to access admin panel
════════════════════════
𐀪 Author: rood
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 13:45:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup
Medium
Websocket response manipulation leads to access admin panel
Introduction
17 views
Daily Writeups
⤷ Title: ️ Day 7/30 My Go-To Browser Extensions for Bug Bounty Hunting & Cybersecurity
════════════════════════
𐀪 Author: Cyphersilhouette
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 12:31:53 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #burpsuite #bug_bounty #hacking #cybersecurity
Medium
🛡️ Day 7/30 My Go-To Browser Extensions for Bug Bounty Hunting & Cybersecurity
Whether you’re a seasoned penetration tester or just getting into ethical hacking, using the right browser extensions for cybersecurity can…
16 views