Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Yelp XSS Flaw Opens the Door to Account Takeovers
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:43 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty_writeup #javascript_tips #xss_attack #bug_bounty
Medium
Yelp XSS Flaw Opens the Door to Account Takeovers
Chaining Cookie Smuggling and XSS for Devastating Yelp Account Compromise
33 views
Daily Writeups
⤷ Title: “The 7 Unspoken Recon Tricks That Fund My Bug Bounty Addiction”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:17 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #technology #learning #programming
Medium
“The 7 Unspoken Recon Tricks That Fund My Bug Bounty Addiction”
Find your first bug by performing recon in a common but in an unusual way
25 views
Daily Writeups
⤷ Title: “Day 17: The Ghost in the DNS — How I Turned a Forgotten Subdomain into a Ransomware Vector”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:07 GMT
════════════════════════
⌗ Tags: #learning #bug_bounty #technology #hacking #programming
Medium
“Day 17: The Ghost in the DNS — How I Turned a Forgotten Subdomain into a Ransomware Vector”
The Silent Art of Subdomain Takeovers and Why They’re More Dangerous Than Ever
23 views
Daily Writeups
⤷ Title: Server-side Template Injection with a Custom Exploit in PHP Twig
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:50:35 GMT
════════════════════════
⌗ Tags: #ssti #template_injection #bug_bounty #php_twig #ssti_exploitation
Medium
Server-side Template Injection with a Custom Exploit in PHP Twig
Discover how server-side template injection (SSTI) can be exploited to delete critical files like SSH keys.
28 views
Daily Writeups
⤷ Title: JWT Bugs and the Dot That Changed Everything ⚔️
════════════════════════
𐀪 Author: soltanali0
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:47:47 GMT
════════════════════════
⌗ Tags: #jwt #idor_vulnerability #bug_bounty #hacking
Medium
JWT Bugs and the Dot That Changed Everything ⚔️
Hi, I’m Ali Soltani ( soltanali0 ) , a Red Team researcher and security enthusiast 🛡️.  This wasn’t my first bug, and not my last — but…
27 views
Daily Writeups
⤷ Title: GrapeQL — Turning A Small Tool Into An Open Source Project
════════════════════════
𐀪 Author: Aleksa Zatezalo
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:52:26 GMT
════════════════════════
⌗ Tags: #python #graphql #security #bug_bounty #vulnerability
Medium
GrapeQL — Turning A Small Tool Into An Open Source Project
Introduction
30 views
Daily Writeups
⤷ Title: Stored XSS via Unsanitized SVG File Upload
════════════════════════
𐀪 Author: youssef awad
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:13:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #cybersecurity #bug_bounty #penetration_testing
Medium
Stored XSS via Unsanitized SVG File Upload
بسم الله الرحمن الرحيم
19 views
Daily Writeups
⤷ Title: The Art of Crafting Malicious URLs: IDOR Meets Email Verification Bypass
════════════════════════
𐀪 Author: Vashu Vats
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:05:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #cybersecurity #vulnerability
Medium
The Art of Crafting Malicious URLs: IDOR Meets Email Verification Bypass
Hey everyone! 👋 I’m Vashu Vats a cybersecurity enthusiast and bug bounty hunter.
20 views
Daily Writeups
⤷ Title: Building Your Own ECU Hacking Setup at Home
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:14:54 GMT
════════════════════════
⌗ Tags: #automotive #diy #hacking #iot #car_hacking
Medium
Building Your Own ECU Hacking Setup at Home
There is a particular satisfaction in cracking open the digital nervous system of a car. It is not about joyriding or stealing. It is about…
15 views
Daily Writeups
⤷ Title: Pickle Rick Tryhackme (THM) Walkthrough
════════════════════════
𐀪 Author: Ammar Ahmed
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:15:09 GMT
════════════════════════
⌗ Tags: #technology #linux #hacking #cybersecurity #ctf
Medium
Pickle Rick Tryhackme (THM) Walkthrough
This walkthrough details the steps to solve the ‘Pickle Rick’ Capture The Flag (CTF) challenge on TryHackMe. As the name suggests, this is…
8 views
Daily Writeups
⤷ Title: How Hackers Use ChatGPT for Cybersecurity ⚡
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:54:26 GMT
════════════════════════
⌗ Tags: #ai #technology #cybersecurity #programming #hacking
Medium
How Hackers Use ChatGPT for Cybersecurity ⚡
Hey there 👋, Unless you’ve been living under a digital rock 🪨, you already know that
7 views
Daily Writeups
⤷ Title: Dev Said ‘It’s Encrypted, It’s Safe’ Security Said “Think Again”
════════════════════════
𐀪 Author: Blue_eye
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:52:02 GMT
════════════════════════
⌗ Tags: #security #information_technology #mobile_app_development #android #hacking
Medium
Dev Said ‘It’s Encrypted, It’s Safe’ Security Said “Think Again”
During a mobile security assessment, I noticed something unsettling the app was parking passwords, usernames, and tokens in…
11 views
Daily Writeups
⤷ Title: PG Practice — vmdak (Linux)
════════════════════════
𐀪 Author: Lepton
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 19:13:00 GMT
════════════════════════
⌗ Tags: #hacking #provinggrounds #penetration_testing #oscp #pentesting
Medium
PG Practice — vmdak (Linux)
TLDR: Foothold — Fast5 Prison Management System (SQLi + PHP file upload vuln); Privesc — MySQL enumeration + Jenkins vulns
10 views
Daily Writeups
⤷ Title: CraxsRat 最新版本 7.7 下载链接 2025
════════════════════════
𐀪 Author: CraxsRAT 7.7 最新版本下载
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:52:36 GMT
════════════════════════
⌗ Tags: #hacking #crypto #security #cybersecurity #craxsrat_chinese
Medium
介绍
CraxsRat 是一款黑客工具，借助它，你可以控制任何人的手机。它还能保障你手机的安全。有了这款应用，你可以监听女朋友手机上的所有对话。你可以入侵女朋友的手机。你可以入侵任何人的手机，并将其完全控制。
13 views
Daily Writeups
⤷ Title: Wallet Compromise Linked to kcmtraincxx.cc: Urgent Steps to Take
════════════════════════
𐀪 Author: Scam Scout
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:30:01 GMT
════════════════════════
⌗ Tags: #finance #phishing #hacking #cryptocurrency
Medium
Wallet Compromise Linked to kcmtraincxx.cc: Urgent Steps to Take
In recent weeks, numerous complaints have emerged, highlighting the fraudulent activities of phishing sites and malicious dApp front-ends…
12 views
Daily Writeups
⤷ Title: PG Practice — Pelican (Linux)
════════════════════════
𐀪 Author: Lepton
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:06:02 GMT
════════════════════════
⌗ Tags: #oscp #provinggrounds #pentesting #penetration_testing #hacking
Medium
PG Practice — Pelican (Linux)
TLDR: Foothold — Exhibitor web UI public exploit; Privesc — sudo gcore + enumeration for password files
15 views
Daily Writeups
⤷ Title: The Behavioral Intelligence Revolution: How Runtime Data Is Reshaping Threat Management
════════════════════════
𐀪 Author: Spektion
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 20:02:44 GMT
════════════════════════
⌗ Tags: #security_operation_center #runtime_security #infosec #vulnerability_management #cybersecurity
Medium
The Behavioral Intelligence Revolution: How Runtime Data Is Reshaping Threat Management
Runtime visibility into software behavior is changing how security pros identify & respond to threats, moving beyond signatures to…
6 views
Daily Writeups
⤷ Title: The Dawn of Transparent AI: A Deep Dive into the Deeplog Neurosymbolic Machine
════════════════════════
𐀪 Author: Berend Watchus
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 18:17:14 GMT
════════════════════════
⌗ Tags: #data_science #cybersecurity #infosec #computer_science #data_visualization
Medium
The Dawn of Transparent AI: A Deep Dive into the Deeplog Neurosymbolic Machine
A new language for better, safer and more secure AI
7 views
Daily Writeups
⤷ Title: CyberDefenders: PsExec Hunt Lab — Walkthrough
════════════════════════
𐀪 Author: Luis Marquez
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:57:05 GMT
════════════════════════
⌗ Tags: #walkthrough #cybersecurity
Medium
CyberDefenders: PsExec Hunt Lab — Walkthrough
Scenario
6 views
Daily Writeups
⤷ Title: DSI — Cybersécurité : élaborer une PSSI vite fait bien fait !
════════════════════════
𐀪 Author: Christophe Vriet
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:42:51 GMT
════════════════════════
⌗ Tags: #pssi #cybersecurity #policy
Medium
DSI — Cybersécurité : élaborer une PSSI vite fait bien fait !
🏢 Niveau 3 — Stratégie
7 views
Daily Writeups
⤷ Title: Why Security Tools Alone Will Never Save You From the Next Breach
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 21:41:29 GMT
════════════════════════
⌗ Tags: #ai #agentic_ai #malware #cybersecurity #information_security
Medium
Why Security Tools Alone Will Never Save You From the Next Breach
For years, companies have poured millions into firewalls, zero-trust architectures, advanced detection tools, and AI-driven defense…
12 views