Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 13:52:00 +0530
════════════════════════
⌗ Tags: No_Tags
57 views
Daily Writeups
⤷ Title: How Low Severity Bugs Lead to Critical Rewards
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:53:35 GMT
════════════════════════
⌗ Tags: #vulnerability #penetration_testing #bug_bounty #technology #tips_and_tricks
Medium
How Low Severity Bugs Lead to Critical Rewards
How Ignored Issues Like Open Redirects, Verb Tampering, and Minor Info Leaks Can Lead to Account Takeovers and RCE
50 views
Daily Writeups
⤷ Title: The HackerOne-Wayback Machine Saga: An Unofficial Vulnerability or Just Public Oversight?
════════════════════════
𐀪 Author: Aditya sunny
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:52:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugs #hacking
Medium
The HackerOne-Wayback Machine Saga: An Unofficial Vulnerability or Just Public Oversight?
When I stumbled upon a way to access previously hidden bug bounty rewards on HackerOne using the Wayback Machine, I thought I’d hit upon a…
32 views
Daily Writeups
⤷ Title: The $100,000 Click: My First Year in Bug Bounties
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:50:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #ethical_hacking #cybersecurity #bug_bounty_tips
Medium
The $100,000 Click: My First Year in Bug Bounties
From Ramen Noodles to Life-Changing Payouts
25 views
Daily Writeups
⤷ Title: The Ultimate API Penetration Testing Checklist (2025 Edition)
════════════════════════
𐀪 Author: Andrei Ivan
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:49:57 GMT
════════════════════════
⌗ Tags: #api_security #bug_bounty #bug_bounty_tips #ethical_hacking #infosec
Medium
The Ultimate API Penetration Testing Checklist (2025 Edition)
Practical, actionable steps to dominate API security testing with real-world examples
36 views
Daily Writeups
⤷ Title: Exploiting API Version Mismatches for Hidden Vulnerabilities
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:49:26 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #bug_bounty #vulnerability #technology
Medium
Exploiting API Version Mismatches for Hidden Vulnerabilities
How Overlooked /v1/, /v2/, and Legacy Endpoints Open the Door to Authorization Bypasses, Logic Flaws, and Forgotten Code Paths
22 views
Daily Writeups
⤷ Title: How to Approach Finding Bugs Easily: My Bug Hunting Methodology
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:48:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #programming #information_security #technology
Medium
🐞 How to Approach Finding Bugs Easily: My Bug Hunting Methodology
Hey fellow hacker! 👋 Bug hunting often feels chaotic — hundreds of subdomains, unknown endpoints, tools everywhere. I’ve been there too…
26 views
Daily Writeups
⤷ Title: SQL injection attack, listing the database contents on Oracle — Portswigger
════════════════════════
𐀪 Author: RayofHope
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:43:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #penetration_testing #web_penetration_testing #cyber_security_training
Medium
SQL injection attack, listing the database contents on Oracle — Portswigger
Hi, my fellow hackers. This is Rayofhope. I have over 5 years of experience and am currently working as a consultant with a Big 4 firm.
22 views
Daily Writeups
⤷ Title: Notification Bypass on TikTok: Sending Alerts to Users Who Blocked Me
════════════════════════
𐀪 Author: Sandipgyawali
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 08:40:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #ti̇ktok #hackerone
Medium
Notification Bypass on TikTok: Sending Alerts to Users Who Blocked Me
While exploring TikTok’s block and messaging system, I discovered a bug that allowed me to send notifications to a user who had already…
38 views
Daily Writeups
⤷ Title: How a Late-Night iSpy.today Alert Turned Into a $1000 Bounty
════════════════════════
𐀪 Author: Arshad Kazmi
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 08:31:43 GMT
════════════════════════
⌗ Tags: #github_dork #github_secret_scanning #bug_bounty #hackerone #i_spy
Medium
How a Late-Night iSpy.today Alert Turned Into a $1000 Bounty
About a month ago, I launched iSpy.today, a tool built for bug bounty hunters to monitor GitHub push events in real time and catch exposed…
16 views
Daily Writeups
⤷ Title: From Generalist to Specialist: The Proven Path to Bug Bounty Mastery
════════════════════════
𐀪 Author: Andrei Ivan
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:56:55 GMT
════════════════════════
⌗ Tags: #infosec #ethical_hacking_training #cybersecurity_training #bug_bounty_tips #bug_bounty
Medium
From Generalist to Specialist: The Proven Path to Bug Bounty Mastery
The world of bug bounty hunting is evolving fast. While the generalists chase after every XSS vulnerability, the real winners are those who…
17 views
Daily Writeups
⤷ Title: Exploiting API Version Mismatches for Hidden Vulnerabilities
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:49:25 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #bug_bounty #vulnerability #technology
Medium
Exploiting API Version Mismatches for Hidden Vulnerabilities
How Overlooked /v1/, /v2/, and Legacy Endpoints Open the Door to Authorization Bypasses, Logic Flaws, and Forgotten Code Paths
12 views
Daily Writeups
⤷ Title: No Captcha? No Problem! How I Mass-Registered 10K Accounts and Took Over the App
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:42:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #money #hacking #bug_bounty
Medium
No Captcha? No Problem! How I Mass-Registered 10K Accounts and Took Over the App 🤖📨
Hey there!😁
32 views
Daily Writeups
⤷ Title: How I Downloaded All Bitbucket Repos by Finding a Leaked Token in a JS file for $4k Bounty.
════════════════════════
𐀪 Author: Imran Hossain
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:42:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #writeup #bug_bounty_writeup #bug_bounty #bug_bounty_tips
Medium
How I Downloaded All Bitbucket Repos by Finding a Leaked Token in a JS file for $4k Bounty.
🧠 Intro
23 views
Daily Writeups
⤷ Title: JWT Authentication Bypass Via Unverified Signature — Without Burpsuite
════════════════════════
𐀪 Author: Leerlryzck
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:32:12 GMT
════════════════════════
⌗ Tags: #hacking #walkthrough #writeup #cybersecurity #vulnerability
Medium
JWT Authentication Bypass Via Unverified Signature — Without Burpsuite
Challenge kali ini berasal dari website portswigger yang dimana tantangannya adalah JWT Authentication Bypass Via Unverified Signature…
26 views
Daily Writeups
⤷ Title: Day 5 of MCP Security: Context Leaks, Scope Creep & Shadow Permissions
════════════════════════
𐀪 Author: Vaibhav Kumar Srivastava
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:19:01 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #bug_bounty #hacking #mcp_server
Medium
🧠 Day 5 of MCP Security: Context Leaks, Scope Creep & Shadow Permissions
Earlier we explored how AI agents powered by Model Context Protocol (MCP) introduce a hidden execution layer that traditional security…
14 views
Daily Writeups
⤷ Title: INTRODUCTION TO NETWORK
════════════════════════
𐀪 Author: Alestin shelmon
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:08:08 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity #network_security #network_attacks
Medium
INTRODUCTION TO NETWORK
In this exciting journey, we’ll dive into the world of networking, unraveling its mysteries and making complex concepts simple and…
11 views
Daily Writeups
⤷ Title: VulneraX0 — Fintech-Style Web Exploitation Lab
════════════════════════
𐀪 Author: TraceX0
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 08:48:01 GMT
════════════════════════
⌗ Tags: #security_research #infosec #web_security #ethical_hacking #vulnerability_assessment
Medium
🔥VulneraX0 — Fintech-Style Web Exploitation Lab
👋 Who Am I?
12 views
Daily Writeups
⤷ Title: Why Default Compliance Certificates Aren’t Enough in the Age of AI-Driven Threats
════════════════════════
𐀪 Author: Piyush Maharishi
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 08:09:50 GMT
════════════════════════
⌗ Tags: #infosec #zero_trust #compliance #cybersecurity #security_strategy
Medium
Why Default Compliance Certificates Aren’t Enough in the Age of AI-Driven Threats
Security today is only as good as its ability to adapt in real time — and in a world where AI is accelerating the speed, scale, and…
12 views
Daily Writeups
⤷ Title: Security Champions — Scaling Security Through Collaboration
════════════════════════
𐀪 Author: Piyush Maharishi
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:54:41 GMT
════════════════════════
⌗ Tags: #shiftleft #cybersecurity #security_champion #security_culture #infosec
Medium
Security Champions — Scaling Security Through Collaboration
Information security has never been just the responsibility of the security team — it’s everyone’s responsibility. In a world where a…
10 views
Daily Writeups
⤷ Title: Open Source Tool for AI-Specific Threat Modeling — Fast, Context-Aware, and Developer-Friendly
════════════════════════
𐀪 Author: Sandeep Saxena
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:50:29 GMT
════════════════════════
⌗ Tags: #ai_threat_modeling #infosec #open_source #threat_modeling
Medium
Open Source Tool for AI-Specific Threat Modeling — Fast, Context-Aware, and Developer-Friendly
Artificial Intelligence is transforming every sector — from healthcare and finance to marketing and national security. But while the hype…
12 views