Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 22 Oct 2023 06:21:50 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Lab:6
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/e4e6891ba7eb
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #xss_vulnerability #bugs #webapplicationpentest #cybersecurity #xss_attack
Medium
Lab:6
Reflected XSS with some SVG markup allowed
17 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 25 Oct 2023 09:38:29 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: The Types Of Web Application Attacks
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/cb4f26fbb9fd
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #ethical_hacking #webapplicationpentest #bug_bounty #cybersecurity #attack
Medium
The Types Of Web Application Attacks
Web applications are vulnerable to various types of attacks that can compromise their security and functionality.
9 views
Daily Writeups
β€· Title: Old School Out-of-Band (OOB) SQL Injection Manual Approach
════════════════════════
π€ͺ Author: Anon Tuttu Venus
════════════════════════
β΄΅ Time: Tue, 31 Dec 2024 19:46:42 GMT
════════════════════════
βŒ— Tags: #webapplicationpentest #sql_injection #bug_bounty #owasp_top_10 #sqli
Medium
Old School Out-of-Band (OOB) SQL Injection Manual Approach
I recently discovered an Out-of-Band (OOB) SQL injection in a private program. I was able to crack it easily with basic payload hence I…
14 views
Daily Writeups
β€· Title: The Software Development Logic Behind Subfinder and Assetfinder
════════════════════════
π€ͺ Author: Onurcan GenΓ§
════════════════════════
β΄΅ Time: Thu, 20 Feb 2025 22:02:03 GMT
════════════════════════
βŒ— Tags: #cybersecurity #web_application_security #penetration_testing #webapplicationpentest #domains
Medium
The Software Logic Behind Subfinder and Assetfinder
Subdomain enumeration is a critical first step in mapping out an organization’s digital footprint.
15 views
Daily Writeups
β€· Title: Expanding Horizons in Cybersecurity: Medium and Large Scope-Based Recon
════════════════════════
π€ͺ Author: Otlhomame Thibelang
════════════════════════
β΄΅ Time: Sat, 01 Mar 2025 22:42:56 GMT
════════════════════════
βŒ— Tags: #red_team_methodology #pentesting #reconnaissance #cybersecurity #webapplicationpentest
Medium
Expanding Horizons in Cybersecurity: Medium and Large Scope-Based Recon
Effective reconnaissance is considered the backbone of sound web application security in the ever-changing field of cybersecurity. Positive…
23 views
Daily Writeups
β€· Title: Unlocking the Mysteries of HTTP Status Codes: Let’s Learn Together
════════════════════════
π€ͺ Author: Tharindu Damith
════════════════════════
β΄΅ Time: Sun, 02 Mar 2025 04:52:26 GMT
════════════════════════
βŒ— Tags: #cybersecurity #http_status_code #enumeration #webapplicationpentest #ethical_hacking
Medium
Unlocking the Mysteries of HTTP Status Codes: Let’s Learn Together
β€” -
33 views
Daily Writeups
β€· Title: Cross-Site Scripting (XSS): A Growing Web Security Threat
════════════════════════
π€ͺ Author: Otlhomame Thibelang
════════════════════════
β΄΅ Time: Sun, 23 Mar 2025 08:10:03 GMT
════════════════════════
βŒ— Tags: #webapplicationpentest #cross_site_scripting #xss_attack #xss_vulnerability #cybersecurity
Medium
Cross-Site Scripting (XSS): A Growing Web Security Threat
What is XSS?
43 views
Daily Writeups
β€· Title: OTP Flood Attack | Bug Bounty
════════════════════════
π€ͺ Author: A S manikandan
════════════════════════
β΄΅ Time: Sun, 23 Mar 2025 12:13:55 GMT
════════════════════════
βŒ— Tags: #otp_flood_attack #webapplicationpentest #web_application_security #bug_hunter #cybersecurity
Medium
OTP Flood Attack | Bug Bounty
Hi guys, I am back with an another scenario. Usually whenever we visit our friends or relatives home, we used to check the overall look of…
62 views
Daily Writeups
β€· Title: Blind SQL Injectionβ€Šβ€”β€ŠEasy Stuff
════════════════════════
π€ͺ Author: Saswath Vel
════════════════════════
β΄΅ Time: Thu, 10 Apr 2025 02:15:37 GMT
════════════════════════
βŒ— Tags: #blind_sql_injection #cybersecurity #sql_injection #vapt #webapplicationpentest
Medium
Blind SQL Injection β€” Easy Stuff
Hey There, Blind SQL injection occurs when an application is vulnerable to SQL injectionπŸ’‰, but it doesn’t show the database error or…
63 views
Daily Writeups
β€· Title: Web App Security Flaws: Identification, Exploitation & Mitigation
════════════════════════
π€ͺ Author: Gouthamanair
════════════════════════
β΄΅ Time: Mon, 21 Apr 2025 02:30:19 GMT
════════════════════════
βŒ— Tags: #penetration_testing #webapplicationpentest #web_application_security #vulnerability_assessment #webapplicationassessment
Medium
Web App Security Flaws: Identification, Exploitation & Mitigation
πŸ” Introduction
57 views
Daily Writeups
β€· Title: The Invisible War Inside Your SaaS
════════════════════════
π€ͺ Author: echosso
════════════════════════
β΄΅ Time: Sat, 02 Aug 2025 12:15:53 GMT
════════════════════════
βŒ— Tags: #webapplicationpentest #penetration_testing #devsecops #web_development #saas
Medium
The Invisible War Inside Your SaaS
Your SaaS platform is more than just code, it’s a dynamic, ever-evolving digital machine.
27 views
Daily Writeups
β€· Title: Open Redirect Vulnerability in SSO API
════════════════════════
π€ͺ Author: Ehtesham Ul Haq
════════════════════════
β΄΅ Time: Sun, 31 Aug 2025 11:25:39 GMT
════════════════════════
βŒ— Tags: #webapplicationpentest #bug_bounty #writeup #pentesting #open_redirect
Medium
Open Redirect Vulnerability in SSO API
Free Article Link: Click for free!
12 views
Daily Writeups
β€· Title: TryHackMe-Hammer
════════════════════════
π€ͺ Author: Abdullah Al Ahad
════════════════════════
β΄΅ Time: Wed, 24 Sep 2025 19:13:58 GMT
════════════════════════
βŒ— Tags: #hammer_walkthrough #webapplicationpentest #penetration_testing #tryhackme #tryhackme_walkthrough
Medium
TryHackMe-Hammer
β€œCompleting the Hammer Room: My Journey Through Web Application Pentesting on TryHackMe”
23 views
Daily Writeups
β€· Title: Portswigger mystery lab write up -Business logic vulnerabilities: Authentication bypass via flawed…
════════════════════════
π€ͺ Author: Hubert
════════════════════════
β΄΅ Time: Fri, 03 Oct 2025 17:45:04 GMT
════════════════════════
βŒ— Tags: #ctf_writeup #cyebrsecurity #webapplicationpentest #hacking #portswigger
Medium
Portswigger mystery lab write up -Business logic vulnerabilities: Authentication bypass via flawed…
This is a description of the steps I took to solve a PortSwigger lab about business logic vulnerabilities [1]: Authentication bypass via a…
22 views
Daily Writeups
β€· Title: When GraphQL becomes a backdoor: SSRF to RCE in a real-world GraphQL endpoint.
════════════════════════
π€ͺ Author: MrLionOfficial
════════════════════════
β΄΅ Time: Sat, 11 Oct 2025 21:04:16 GMT
════════════════════════
βŒ— Tags: #graphql #cybersecurity #bug_bounty #webapplicationpentest #ethical_hacking
Medium
When GraphQL becomes a backdoor: SSRF to RCE in a real-world GraphQL endpoint.
How an unsafe GraphQL mutation allowed server-side request forgery and remote code executionβ€Šβ€”β€Šand the defensive steps every GraphQL app…
20 views
Daily Writeups
β€· Title: DVWAβ€Šβ€”β€ŠCommand Injection (Low e Medium): Guia prΓ‘tico
════════════════════════
π€ͺ Author: HeloΓ­sa TomΓ© de Araujo
════════════════════════
β΄΅ Time: Tue, 02 Dec 2025 21:54:59 GMT
════════════════════════
βŒ— Tags: #cybersecurity #dvwa #webapplicationpentest
Medium
DVWA β€” Command Injection (Low e Medium): Guia prΓ‘tico
O DVWA (Damn Vulnerable Web Application) Γ© uma ferramenta feita para treinar seguranΓ§a ofensiva. Um dos mΓ³dulos Γ© o Command Injection…
4 views
Daily Writeups
β€· Title: SSRF DNS Rebinding Bypass Technique
════════════════════════
π€ͺ Author: Fatimahasan
════════════════════════
β΄΅ Time: Sun, 07 Dec 2025 18:26:16 GMT
════════════════════════
βŒ— Tags: #filter_bypass #ssrf #webapplicationpentest #pentesting #bug_bounty
Medium
SSRF DNS Rebinding Bypass Technique
What is DNS Rebinding?
36 views
Daily Writeups
β€· Title: How I found my first bug
════════════════════════
π€ͺ Author: Fatimahasan
════════════════════════
β΄΅ Time: Sat, 03 Jan 2026 00:19:29 GMT
════════════════════════
βŒ— Tags: #bug_bounty #webapplicationpentest
19 views
Daily Writeups
β€· Title: ΰ¦“ΰ§Ÿΰ§‡ΰ¦¬ অ্যাΰ¦ͺ্লিকেঢন ΰ¦ͺΰ§‡ΰ¦¨ΰ¦Ÿΰ§‡ΰ¦Έΰ§ΰ¦Ÿΰ¦Ώΰ¦‚ΰ§Ÿΰ§‡ রিকন ΰ¦Ÿΰ§ΰ¦²ΰ¦Έΰ§‡ΰ¦° ব্যবহার: ΰ¦ΰ¦•ΰ¦Ÿΰ¦Ώ ΰ¦ͺূর্ণাঙ্গ গাই঑
════════════════════════
π€ͺ Author: SecurityMindPro
════════════════════════
β΄΅ Time: Sun, 18 Jan 2026 21:36:41 GMT
════════════════════════
βŒ— Tags: #web_testing #penetration_testing #webapplicationpentest
Medium
ΰ¦“ΰ§Ÿΰ§‡ΰ¦¬ অ্যাΰ¦ͺ্লিকেঢন ΰ¦ͺΰ§‡ΰ¦¨ΰ¦Ÿΰ§‡ΰ¦Έΰ§ΰ¦Ÿΰ¦Ώΰ¦‚ΰ§Ÿΰ§‡ রিকন ΰ¦Ÿΰ§ΰ¦²ΰ¦Έΰ§‡ΰ¦° ব্যবহার: ΰ¦ΰ¦•ΰ¦Ÿΰ¦Ώ ΰ¦ͺূর্ণাঙ্গ গাই঑
সাইবার ΰ¦Έΰ¦Ώΰ¦•ΰ¦Ώΰ¦‰ΰ¦°ΰ¦Ώΰ¦Ÿΰ¦Ώ এবং ΰ¦ͺΰ§‡ΰ¦¨ΰ¦Ώΰ¦Ÿΰ§ΰ¦°ΰ§‡ΰ¦Άΰ¦¨ ΰ¦Ÿΰ§‡ΰ¦Έΰ§ΰ¦Ÿΰ¦Ώΰ¦‚ΰ§Ÿΰ§‡ΰ¦° ΰ¦œΰ¦—ΰ¦€ΰ§‡ ΰ¦ΰ¦•ΰ¦Ÿΰ¦Ώ বহুল ΰ¦ͺ্রচলিঀ কΰ¦₯ΰ¦Ύ ΰ¦†ΰ¦›ΰ§‡β€Šβ€”β€Šβ€œΰ¦†ΰ¦ͺনি ΰ¦―ΰ¦Ύ দেখঀে ΰ¦ͺΰ¦Ύΰ¦šΰ§ΰ¦›ΰ§‡ΰ¦¨ না, ঀা আΰ¦ͺনি হ্যাক করঀে ΰ¦ͺারবেন নাΰ₯€β€ এই…
30 views
Daily Writeups
β€· Title: Web Application Penetration Testing: Methodology, Tools & Guide
════════════════════════
π€ͺ Author: Jamescantor
════════════════════════
β΄΅ Time: Wed, 13 May 2026 16:27:11 GMT
════════════════════════
βŒ— Tags: #webapplicationpentest #web_penetration_testing #web_application_testing #penetration_testing
Medium
Web Application Penetration Testing: Methodology, Tools & Guide
When I first started learning web application penetration testing, I thought the job was mostly about tools and payloads. The more…
14 views