Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: External Network Penetration Test
════════════════════════
𐀪 Author: Taishakarsiya
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 13:43:49 GMT
════════════════════════
⌗ Tags: #network_penetration #penetration_testing #cybersecurity #external_network #web_penetration_testing
Medium
External Network Penetration Test
External Network Penetration Testing: Best Strategies and Techniques
22 views
Daily Writeups
⤷ Title: Why SAST is Not Enough. Validating the Entire Perimeter: Subdomain-to-Exploit Coverage at Scale
════════════════════════
𐀪 Author: Ivan Vereshchaha
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:05:47 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #penetration_testing #web_penetration_testing #cyber_security_solutions #cybersecurity
Medium
Why SAST is Not Enough. Validating the Entire Perimeter: Subdomain-to-Exploit Coverage at Scale
Disclaimer: This document is partner-advertisement material produced to promote the Scry APT AI security framework by Scry.pro. It…
15 views
Daily Writeups
⤷ Title: TryHackMe: Hammer Walkthrough
════════════════════════
𐀪 Author: Farid Narimanov
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 21:45:43 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_testing #vulnhub #ctf #cybersecurity
Medium
TryHackMe: Hammer Walkthrough
Rate Limit Bypass + OTP Brute Force + JWT kid Injection = Full Account Takeover
19 views
Daily Writeups
⤷ Title: Walkthrough OffSec — ColdBoxEasy
════════════════════════
𐀪 Author: Vyom Maloo
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 20:30:49 GMT
════════════════════════
⌗ Tags: #offsec #penetration_testing #web_penetration_testing #cybersecurity #privilege_escalation
Medium
Walkthrough OffSec — ColdBoxEasy
15 views
Daily Writeups
⤷ Title: How I Found a Race Condition in an Email Verification Feature
════════════════════════
𐀪 Author: Mazen Rady
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 07:25:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #web_penetration_testing #bug_bounty #penetration_testing #bugbounty_poc
Medium
How I Found a Race Condition in an Email Verification Feature
.اللهم انفعنا بما علَّمتنا، وعلِّمنا ما ينفعنا، وزِدنا علمًا وفقهًا وفهمًا يا رب العالمين
31 views
Daily Writeups
⤷ Title: How a Simple Profile Setting Revealed Sensitive Credentials in a Bug Bounty Program
════════════════════════
𐀪 Author: Mazen Rady
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 08:09:01 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_disclosure #web_penetration_testing #bugbounty_writeup #bug_bounty
Medium
How a Simple Profile Setting Revealed Sensitive Credentials in a Bug Bounty Program
.اللهم انفعنا بما علَّمتنا، وعلِّمنا ما ينفعنا، وزِدنا علمًا وفقهًا وفهمًا يا رب العالمين
24 views
Daily Writeups
⤷ Title: Account Takeover via Broken Password Reset Validation
════════════════════════
𐀪 Author: Mohamed Abd almalek
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 12:00:58 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #websecurity_testing #bug_bounty_writeup #bug_bounty_tips #bug_bounty
Medium
Account Takeover via Broken Password Reset Validation
Severity: Critical
Type: Authentication Bypass / Account Takeover (ATO)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten…
28 views
Daily Writeups
⤷ Title: Account Lockout Abuse: How a Login Protection Mechanism Became a Potential DoS Vector
════════════════════════
𐀪 Author: Mazen Rady
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:40:59 GMT
════════════════════════
⌗ Tags: #account_locked #bug_bounty #bug_bounty_writeup #web_penetration_testing #dos_attack
Medium
Account Lockout Abuse: How a Login Protection Mechanism Became a Potential DoS Vector
.اللهم انفعنا بما علَّمتنا، وعلِّمنا ما ينفعنا، وزِدنا علمًا وفقهًا وفهمًا يا رب العالمين
18 views
Daily Writeups
⤷ Title: The Bug Bounty Recon Workflow I Use Before Opening Burp Suite
════════════════════════
𐀪 Author: Michael Oscar
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:22:49 GMT
════════════════════════
⌗ Tags: #burpsuite #web_penetration_testing #bug_bounty #cybersecurity #reconnaissance
Medium
The Bug Bounty Recon Workflow I Use Before Opening Burp Suite
Why great bug bounty hunters spend more time understanding an application than attacking it.
15 views
Daily Writeups
⤷ Title: Invitation Link doesn’t expire after used .
════════════════════════
𐀪 Author: David Demean
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 15:27:07 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #hackerone #cybersecurity #bug_bounty
Medium
Invitation Link doesn’t expire after used .
Hi Hackers , I’m David Demean .
I work as a penetration tester on HackerOne.
9 views