Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Authentication part-2 : 2FA simple bypass
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 07:21:10 GMT
════════════════════════
⌗ Tags: #penetration_testing #authentication #writeup #2fa_bypass #portswigger
Medium
Authentication part-2 : 2FA simple bypass
Hallo CyberExplorer . . . . . .
29 views
Daily Writeups
⤷ Title: How I Bypassed HackerOne’s 2FA in 5 Seconds
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 01:07:34 GMT
════════════════════════
⌗ Tags: #ethical_hacking #graphql #2fa_bypass #bug_bounty #cybersecurity
Medium
How I Bypassed HackerOne’s 2FA in 5 Seconds
How a race condition exploit let me bypass 2FA on HackerOne — a critical bug bounty find with a GraphQL hacking twist.
25 views
Daily Writeups
⤷ Title: $500 OTP Bypass: Found It, Proved It, Then…
════════════════════════
𐀪 Author: Kailasv
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 03:00:08 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_hunter #2fa_bypass #bug_bounty #bug_bounty_tips
Medium
$500 OTP Bypass: Found It, Proved It, Then…
Bug bounty hunting isn’t always about the payout 💰 — sometimes, it’s the hunt, the discovery, and the sweet little moments where logic…
57 views
Daily Writeups
⤷ Title: How I Bypass 2FA through confirmation link..
════════════════════════
𐀪 Author: Aftab Raja
════════════════════════
ⴵ Time: Sat, 12 Jul 2025 20:14:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #2fa_bypass #web_hacking #hacker
Medium
🎉How I Bypass 2FA through confirmation link..
🫡helo guys, I am Aftab aka security researcher and bug hunter from india🇮🇳…
35 views
Daily Writeups
⤷ Title: How I Bypassed a Broken 2FA Implementation Using Response Manipulation
════════════════════════
𐀪 Author: Anupam Singh
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 06:38:22 GMT
════════════════════════
⌗ Tags: #2fa_bypass #bug_bounty
Medium
How I Bypassed a Broken 2FA Implementation Using Response Manipulation
Even 2FA can fail — if it trusts the wrong side of the communication.
17 views
Daily Writeups
⤷ Title: (Tryhackme)- Rate Limits, OTPs, and JWTs — Breaking the Hammer CTF
════════════════════════
𐀪 Author: Dair H
════════════════════════
ⴵ Time: Mon, 15 Sep 2025 16:51:15 GMT
════════════════════════
⌗ Tags: #pentesting #jwt #tryhackme #2fa_bypass #post
Medium
(Tryhackme)- Rate Limits, OTPs, and JWTs — Breaking the Hammer CTF
Summary:
24 views
Daily Writeups
⤷ Title: When Six Zeros Broke a Food Delivery Empire
════════════════════════
𐀪 Author: Jackson Mittag
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 23:18:45 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #2fa_bypass #bug_bounty_writeup #bug_bounty
Medium
When Six Zeros Broke a Food Delivery Empire
The Story of a Critical 2FA Bypass That Should Never Have Existed
11 views
Daily Writeups
⤷ Title: Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 00:22:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA bypass #Account Hijacking #Authentication Bypass #Cal.com #Critical Vulnerability #CVE_2025_66489 #TOTP
Daily CyberSecurity
Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes
A Critical (CVSS 9.9) Auth Bypass flaw (CVE-2025-66489) in Cal.com allows attackers to bypass password checks and hijack accounts by supplying any value in the TOTP field. Update to v5.9.8.
13 views
Daily Writeups
⤷ Title: The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:06:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #2FA bypass #APT28 #BlueDelta #Credential Theft #cyber_espionage #Fancy Bear #GRU #Ngrok #phishing #UKR.NET #Ukraine
Daily CyberSecurity
The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky
BlueDelta (APT28) is targeting UKR.NET users with a sophisticated phishing campaign using ngrok and Mocky to bypass security and steal 2FA codes.
31 views
Daily Writeups
⤷ Title: Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:53:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA bypass #active directory #CVE_2020_12812 #cyber attack #firewall security #FortiGate #Fortinet #LDAP #network_security #Patch Alert #SSL VPN
Daily CyberSecurity
Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
Fortinet has issued a warning regarding the active exploitation of a three-year-old vulnerability that allows attackers to bypass two-factor authentication (2FA) on FortiGate firewalls simply by c…
22 views
Daily Writeups
⤷ Title: How a Capital Letter Bypasses Fortinet 2FA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:09:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #2FA Bypass #Active Directory #CVE_2020_12812 #cyber attack #Cybersecurity 2025 #FortiGate #Fortinet #FortiOS #LDAP #MFA #SSL VPN
Penetration Testing Tools
How a Capital Letter Bypasses Fortinet 2FA
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in
25 views
Daily Writeups
⤷ Title: Hacked Despite 2FA: My LinkedIn Hack Lessons
════════════════════════
𐀪 Author: Ebube Nwankwo
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 21:34:48 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #2fa_bypass #tech #linkedin
Medium
Hacked Despite 2FA: My LinkedIn Hack Lessons
I used to wonder how people's accounts get hacked, even with 2FA turned on.
30 views
Daily Writeups
⤷ Title: Unmasking Gbyte: How One Hacker Exposed the Masters of 2FA-Bypassing Stalkerware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:26:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2FA Bypass #Data Breach 2026 #Gbyte Technology #Google Password Leak #iCloud Hack #Maia Arson Crimew #MSafely #Shenzhen #SpyX #stalkerware #Xiunde Cheng
Penetration Testing Tools
Unmasking Gbyte: How One Hacker Exposed the Masters of 2FA-Bypassing Stalkerware
Investigative journalist Maia Arson Crimew disclosed in a recent blog post that in February 2024, she received a
15 views
Daily Writeups
⤷ Title: 2FA Bypass via Session Fixation — High Vulnerability in Vero 300$
════════════════════════
𐀪 Author: Hasan Khan
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 18:35:14 GMT
════════════════════════
⌗ Tags: #idor_vulnerability #bug_bounty_tips #2fa_bypass #bug_bounty_writeup
Medium
2FA Bypass via Session Fixation — High Vulnerability in Vero 300$
📌 Introduction
61 views
Daily Writeups
⤷ Title: 2FA Bypass via OTP Reuse Across Multiple Authentication Flows
════════════════════════
𐀪 Author: rootxJeet
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:45:31 GMT
════════════════════════
⌗ Tags: #otp_bypass #cybersecurity #2fa_bypass #bug_bounty #authentication
Medium
2FA Bypass via OTP Reuse Across Multiple Authentication Flows
Hello everyone, I’m Jeet. I used to hunt bugs regularly, but due to some personal reasons I couldn’t stay consistent for a while. Now I’m…
16 views