Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: I Found an Unauthenticated XSS in a WordPress Hotel Plugin — Then Someone Beat Me to It by a Week
════════════════════════
𐀪 Author: Mr Abdullah
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:47:00 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #javascript #penetration_testing #bug_bounty #xss_attack
Medium
I Found an Unauthenticated XSS in a WordPress Hotel Plugin — Then Someone Beat Me to It by a Week
A reflected XSS in nd-booking, a display:none trap that fools most PoCs, and an honest look at what “duplicate” really means in bug bounty.
15 views
Daily Writeups
⤷ Title: Rendering User-Supplied SVG Without Getting Burned
════════════════════════
𐀪 Author: Suleyman Musayev
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #xss_attack #application_security #ruby #cybersecurity #web_development
Medium
Rendering User-Supplied SVG Without Getting Burned
An SVG is not an image. It is a program the browser will run. If you let users upload avatars, logos, or icons, you are letting them upload…
10 views
Daily Writeups
⤷ Title: From Open Redirect to Account Takeover: How I Turned a "Low" Bug into a $1,500 Critical
════════════════════════
𐀪 Author: Rohith S
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 10:02:19 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #xss_attack #cybersecurity #artificial_intelligence
Medium
From Open Redirect to Account Takeover: How I Turned a "Low" Bug into a $1,500 Critical 🚨💰
###
15 views
Daily Writeups
⤷ Title: Stored Cross-Site Scripting (XSS) Cookie Theft PoC
════════════════════════
𐀪 Author: Muhammad Jubair Hossain
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 06:18:37 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #cybersecurity #web_penetration_testing #stored_xss #xss_attack
Medium
Stored Cross-Site Scripting (XSS) Cookie Theft PoC
This repository contains a proof-of-concept (PoC) demonstrating how a Stored Cross-Site Scripting (XSS) vulnerability can be leveraged to…
38 views
Daily Writeups
⤷ Title: Real World XSS Escalation & Impact
════════════════════════
𐀪 Author: Viodex
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 18:34:44 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #xss_attack #hacking
Medium
Real World XSS Escalation & Impact
Real World XSS Escalation & Impact
21 views
Daily Writeups
⤷ Title: Stored XSS lead to full account take over
════════════════════════
𐀪 Author: MUWAFAK HELAL
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 15:34:59 GMT
════════════════════════
⌗ Tags: #stored_xss #bug_bounty #xss_attack #bug_bounty_writeup #pentesting
Medium
Stored XSS lead to full account take over
Vulnerability: XSS Stored (Stored Cross site scripting) Severity: High Owasp rank: (A05:2025 Injection)
36 views
Daily Writeups
⤷ Title: Reflected XSS di Portal Dokumen Pemerintah [REDACTED] via Parameter Tahun
════════════════════════
𐀪 Author: Mencari si dia
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 06:05:30 GMT
════════════════════════
⌗ Tags: #xss_attack #cybersecurity #bug_hunter
Medium
Reflected XSS di Portal Dokumen Pemerintah [REDACTED] via Parameter Tahun
1. Ringkasan Eksekutif (Executive Summary / TL;DR)
17 views
Daily Writeups
⤷ Title: Reflected XSS di Portal Data IKM Pemerintah [REDACTED] via Parameter Pencarian
════════════════════════
𐀪 Author: Mencari si dia
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 05:55:49 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #bug_hunter #cybersecurity
Medium
Reflected XSS di Portal Data IKM Pemerintah [REDACTED] via Parameter Pencarian
1. Ringkasan Eksekutif (Executive Summary / TL;DR)
25 views
Daily Writeups
⤷ Title: Reflected XSS di Halaman Login Pemerintah Kabupaten [REDACTED] via Parameter redirect
════════════════════════
𐀪 Author: Mencari si dia
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 07:27:32 GMT
════════════════════════
⌗ Tags: #bug_hunter #xss_attack #cybersecurity
Medium
Reflected XSS di Halaman Login Pemerintah Kabupaten [REDACTED] via Parameter redirect
1. Ringkasan Eksekutif (Executive Summary / TL;DR)
24 views
Daily Writeups
⤷ Title: Reflected XSS di Halaman Login Pemerintah Kabupaten [REDACTED] via Parameter p
════════════════════════
𐀪 Author: Mencari si dia
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 07:18:53 GMT
════════════════════════
⌗ Tags: #xss_attack #cybersecurity #bug_hunter
Medium
Reflected XSS di Halaman Login Pemerintah Kabupaten [REDACTED] via Parameter p
1. Ringkasan Eksekutif (Executive Summary / TL;DR)
30 views