Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: CORS Misconfigurations: When the Browser Hands Over the Keys
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 18:37:36 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #web_security #cybersecurity #bug_bounty
Medium
CORS Misconfigurations: When the Browser Hands Over the Keys
Origin reflection, null tricks, regex bypasses, and the misconfigurations that turn CORS into account takeover.
60 views
Daily Writeups
⤷ Title: Enumerating MiniFilter Drivers from Usermode
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 21:33:15 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #infosec #malware #pentesting
Medium
Enumerating MiniFilter Drivers from Usermode
Welcome to this new Medium post, today we are going to explore MiniFilter driver enumeration from usermode, a reconnaissance primitive that…
14 views
Daily Writeups
⤷ Title: 6,820 Subdomains And One 403 That Broke Me
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity #pentesting #bug_bounty_tips
Medium
6,820 Subdomains And One 403 That Broke Me
A single 403 on an internal-looking path kept me for weeks. The control was enforced by source address at the proxy, and no request was…
17 views
Daily Writeups
⤷ Title: Cómo uso Burp AT para Automatizar Tareas de Testing Manual
════════════════════════
𐀪 Author: Alan Brian @soyelmago
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 13:32:02 GMT
════════════════════════
⌗ Tags: #burpsuite #pentesting #cybersecurity #burp_at #bug_bounty
Medium
Cómo uso Burp AT para Automatizar Tareas de Testing Manual
En Bug Bounty y en (Pentesting también) hay una constante: Sabés qué deberías probar… pero hacerlo a mano es repetitivo, mecánico y consume…
11 views
Daily Writeups
⤷ Title: AKERVA : ce que j’ai appris sur le chaînage de vulnérabilités en pentest
════════════════════════
𐀪 Author: AMOGUS | Cybersecurity
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 15:36:53 GMT
════════════════════════
⌗ Tags: #hacking #amogus #pentesting #hackthebox #cybersecurity
Medium
AKERVA : ce que j’ai appris sur le chaînage de vulnérabilités en pentest
Retour d’expérience sur une expérience pratique de sécurité offensive
21 views
Daily Writeups
⤷ Title: 6 Hours = 25 Reflected XSS and 2 Open Redirects
════════════════════════
𐀪 Author: belo
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:11:36 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #pentesting #bug_bounty #bug_bounty_writeup #hacking
Medium
6 Hours = 25 Reflected XSS and 2 Open Redirects
Like my friend Mohamed Abdelmoatie (3at3ot) said, there are two types of bug hunting:
21 views
Daily Writeups
⤷ Title: Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:08:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #web_security #ethical_hacking
Medium
Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
How a ../ in a URL parameter turns into CSRF, cache deception, and account takeover.
18 views
Daily Writeups
⤷ Title: Kernel Shellcode Execution via PTE Manipulation and HalDispatchTable
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 20:35:34 GMT
════════════════════════
⌗ Tags: #windows #malware #hacking #pentesting #cybersecurity
Medium
Kernel Shellcode Execution via PTE Manipulation and HalDispatchTable
Welcome to this new Medium post, today we are looking at this technique: use a vulnerable driver’s read/write primitives to promote a…
26 views
Daily Writeups
⤷ Title: I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes
════════════════════════
𐀪 Author: Foysal Hossain, Senior Consultant @EY
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:01:09 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #pentesting #android_pentesting #penetration_testing #bug_hunting
Medium
I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes
Five minutes. That’s all it took between opening a rooted Android device for the first time and sitting on a Critical severity finding in a…
10 views
Daily Writeups
⤷ Title: No Click, No Login: A Reflected DOM XSS in a Documentation Search Box
════════════════════════
𐀪 Author: ForgetMeNot
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 01:55:50 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #xs #pentesting
Medium
No Click, No Login: A Reflected DOM XSS in a Documentation Search Box
“A static docs site, a search-index tokeniser and one obscure DOM event turned a single link into arbitrary JavaScript in the target’s own…
27 views