Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: “Day 7: API Hacking — How I Stole 5000 OAuth Tokens & Won $300”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:54:41 GMT
════════════════════════
⌗ Tags: #programming #hacking #money #bug_bounty #technology
Medium
“Day 7: API Hacking — How I Stole 5000 OAuth Tokens & Won $300”
Last month, while testing a “secure” fintech app, I discovered an unprotected Firebase database leaking OAuth tokens, bank account links…
29 views
Daily Writeups
⤷ Title: “Day 16: The CI/CD Betrayal — How a Tiny GitHub Action Misconfiguration Led to a $800 Cloud Breach”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:54:29 GMT
════════════════════════
⌗ Tags: #technology #hacking #money #programming #bug_bounty
Medium
“Day 16: The CI/CD Betrayal — How a Tiny GitHub Action Misconfiguration Led to a $800 Cloud Breach”
When Automation Turns Against You: The Silent Leak of Secrets in Build Pipelines
22 views
Daily Writeups
⤷ Title: Query Gone Wild: How I Turned a Forgotten GraphQL Endpoint into Full Account Access
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:53:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #money #hacking #cybersecurity #infosec
Medium
🎯 Query Gone Wild: How I Turned a Forgotten GraphQL Endpoint into Full Account Access
Hey there!😁
22 views
Daily Writeups
⤷ Title: “Day 15: The Phantom JS Threat — How Forgotten Code Became a Silent RCE Bomb”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:53:11 GMT
════════════════════════
⌗ Tags: #technology #programming #hacking #money #bug_bounty
Medium
“Day 15: The Phantom JS Threat — How Forgotten Code Became a Silent RCE Bomb”
When Dead Code Rises From the Grave to Haunt Your Production Systems
16 views
Daily Writeups
⤷ Title: “Day 14: Cookie Hijacking Exposed — How I Bypassed Chrome’s “Secure” Storage”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:53:05 GMT
════════════════════════
⌗ Tags: #medium #technology #cybersecurity #bug_bounty #money
Medium
“Day 14: Cookie Hijacking Exposed — How I Bypassed Chrome’s “Secure” Storage”
When Browser Protections Fail in Unexpected Ways
20 views
Daily Writeups
⤷ Title: Yelp XSS Flaw Opens the Door to Account Takeovers
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:43 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty_writeup #javascript_tips #xss_attack #bug_bounty
Medium
Yelp XSS Flaw Opens the Door to Account Takeovers
Chaining Cookie Smuggling and XSS for Devastating Yelp Account Compromise
33 views
Daily Writeups
⤷ Title: “The 7 Unspoken Recon Tricks That Fund My Bug Bounty Addiction”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:17 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #technology #learning #programming
Medium
“The 7 Unspoken Recon Tricks That Fund My Bug Bounty Addiction”
Find your first bug by performing recon in a common but in an unusual way
25 views
Daily Writeups
⤷ Title: “Day 17: The Ghost in the DNS — How I Turned a Forgotten Subdomain into a Ransomware Vector”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:07 GMT
════════════════════════
⌗ Tags: #learning #bug_bounty #technology #hacking #programming
Medium
“Day 17: The Ghost in the DNS — How I Turned a Forgotten Subdomain into a Ransomware Vector”
The Silent Art of Subdomain Takeovers and Why They’re More Dangerous Than Ever
23 views
Daily Writeups
⤷ Title: Server-side Template Injection with a Custom Exploit in PHP Twig
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:50:35 GMT
════════════════════════
⌗ Tags: #ssti #template_injection #bug_bounty #php_twig #ssti_exploitation
Medium
Server-side Template Injection with a Custom Exploit in PHP Twig
Discover how server-side template injection (SSTI) can be exploited to delete critical files like SSH keys.
28 views
Daily Writeups
⤷ Title: JWT Bugs and the Dot That Changed Everything ⚔️
════════════════════════
𐀪 Author: soltanali0
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:47:47 GMT
════════════════════════
⌗ Tags: #jwt #idor_vulnerability #bug_bounty #hacking
Medium
JWT Bugs and the Dot That Changed Everything ⚔️
Hi, I’m Ali Soltani ( soltanali0 ) , a Red Team researcher and security enthusiast 🛡️.  This wasn’t my first bug, and not my last — but…
27 views
Daily Writeups
⤷ Title: GrapeQL — Turning A Small Tool Into An Open Source Project
════════════════════════
𐀪 Author: Aleksa Zatezalo
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:52:26 GMT
════════════════════════
⌗ Tags: #python #graphql #security #bug_bounty #vulnerability
Medium
GrapeQL — Turning A Small Tool Into An Open Source Project
Introduction
30 views
Daily Writeups
⤷ Title: Stored XSS via Unsanitized SVG File Upload
════════════════════════
𐀪 Author: youssef awad
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:13:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #cybersecurity #bug_bounty #penetration_testing
Medium
Stored XSS via Unsanitized SVG File Upload
بسم الله الرحمن الرحيم
19 views
Daily Writeups
⤷ Title: The Art of Crafting Malicious URLs: IDOR Meets Email Verification Bypass
════════════════════════
𐀪 Author: Vashu Vats
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:05:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #cybersecurity #vulnerability
Medium
The Art of Crafting Malicious URLs: IDOR Meets Email Verification Bypass
Hey everyone! 👋 I’m Vashu Vats a cybersecurity enthusiast and bug bounty hunter.
20 views
Daily Writeups
⤷ Title: Building Your Own ECU Hacking Setup at Home
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:14:54 GMT
════════════════════════
⌗ Tags: #automotive #diy #hacking #iot #car_hacking
Medium
Building Your Own ECU Hacking Setup at Home
There is a particular satisfaction in cracking open the digital nervous system of a car. It is not about joyriding or stealing. It is about…
15 views
Daily Writeups
⤷ Title: Pickle Rick Tryhackme (THM) Walkthrough
════════════════════════
𐀪 Author: Ammar Ahmed
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:15:09 GMT
════════════════════════
⌗ Tags: #technology #linux #hacking #cybersecurity #ctf
Medium
Pickle Rick Tryhackme (THM) Walkthrough
This walkthrough details the steps to solve the ‘Pickle Rick’ Capture The Flag (CTF) challenge on TryHackMe. As the name suggests, this is…
8 views
Daily Writeups
⤷ Title: How Hackers Use ChatGPT for Cybersecurity ⚡
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:54:26 GMT
════════════════════════
⌗ Tags: #ai #technology #cybersecurity #programming #hacking
Medium
How Hackers Use ChatGPT for Cybersecurity ⚡
Hey there 👋, Unless you’ve been living under a digital rock 🪨, you already know that
7 views
Daily Writeups
⤷ Title: Dev Said ‘It’s Encrypted, It’s Safe’ Security Said “Think Again”
════════════════════════
𐀪 Author: Blue_eye
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:02 GMT
════════════════════════
⌗ Tags: #security #information_technology #mobile_app_development #android #hacking
Medium
Dev Said ‘It’s Encrypted, It’s Safe’ Security Said “Think Again”
During a mobile security assessment, I noticed something unsettling the app was parking passwords, usernames, and tokens in…
11 views
Daily Writeups
⤷ Title: PG Practice — vmdak (Linux)
════════════════════════
𐀪 Author: Lepton
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:13:00 GMT
════════════════════════
⌗ Tags: #hacking #provinggrounds #penetration_testing #oscp #pentesting
Medium
PG Practice — vmdak (Linux)
TLDR: Foothold — Fast5 Prison Management System (SQLi + PHP file upload vuln); Privesc — MySQL enumeration + Jenkins vulns
10 views
Daily Writeups
⤷ Title: CraxsRat 最新版本 7.7 下载链接 2025
════════════════════════
𐀪 Author: CraxsRAT 7.7 最新版本下载
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:52:36 GMT
════════════════════════
⌗ Tags: #hacking #crypto #security #cybersecurity #craxsrat_chinese
Medium
介绍
CraxsRat 是一款黑客工具，借助它，你可以控制任何人的手机。它还能保障你手机的安全。有了这款应用，你可以监听女朋友手机上的所有对话。你可以入侵女朋友的手机。你可以入侵任何人的手机，并将其完全控制。
13 views
Daily Writeups
⤷ Title: Wallet Compromise Linked to kcmtraincxx.cc: Urgent Steps to Take
════════════════════════
𐀪 Author: Scam Scout
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:30:01 GMT
════════════════════════
⌗ Tags: #finance #phishing #hacking #cryptocurrency
Medium
Wallet Compromise Linked to kcmtraincxx.cc: Urgent Steps to Take
In recent weeks, numerous complaints have emerged, highlighting the fraudulent activities of phishing sites and malicious dApp front-ends…
12 views
Daily Writeups
⤷ Title: PG Practice — Pelican (Linux)
════════════════════════
𐀪 Author: Lepton
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:06:02 GMT
════════════════════════
⌗ Tags: #oscp #provinggrounds #pentesting #penetration_testing #hacking
Medium
PG Practice — Pelican (Linux)
TLDR: Foothold — Exhibitor web UI public exploit; Privesc — sudo gcore + enumeration for password files
15 views