Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: PortSwigger’s XSS Labs: Complete Walkthrough
════════════════════════
𐀪 Author: Muhammad Ayan
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:30:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #cross_site_scripting #ethical_hacking #web_security
Medium
PortSwigger’s XSS Labs: Complete Walkthrough
Disclaimer: This write-up is for educational purposes only. All attacks are done on PortSwigger’s Web Security Academy labs, which are made…
12 views
Daily Writeups
⤷ Title: PHP2Shell: Web’in %69'unu Tehdit Eden Kritik PHP Açıkları (CVE-2026-109618 & 109619)
════════════════════════
𐀪 Author: Ömer Tuğrul Bayram
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:18:28 GMT
════════════════════════
⌗ Tags: #vulnerability #php #web_security #cybersecurity #infosec
Medium
PHP2Shell: Web’in %69'unu Etkileyen Kritik PHP Açıkları (CVE-2026–109618 & 109619)
PHP2Shell: Web’in %69'unu Etkileyen Kritik PHP Açıkları (CVE-2026–109618 & 109619) Evet arkadaşlar yaklaşık 2 gün önce karşımıza PHP2Shell adında çok geniş kapsamlı ve çok …
18 views
Daily Writeups
⤷ Title: El Bandito — TryHackMe Writeup
════════════════════════
𐀪 Author: Shahadat Fahim
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:39:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #web_security #cybersecurity #http_request_smuggling
Medium
El Bandito — TryHackMe Writeup
# El Bandito — TryHackMe Writeup
17 views
Daily Writeups
⤷ Title: Anatomy of a Full Platform Takeover: 17 Findings, One Missing Line of Code
════════════════════════
𐀪 Author: Muhammedmoslaam
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:20:00 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #web_penetration_testing #cybersecurity #artificial_intelligence #api_security
Medium
Anatomy of a Full Platform Takeover: 17 Findings, One Missing Line of Code
I recently finished a security assessment of a multi-tenant SaaS platform with an integrated LLM assistant. Final rating: Critical. 17…
49 views
Daily Writeups
⤷ Title: What I Already Knew vs. What I Learned from TryHackMe Pre Security
════════════════════════
𐀪 Author: Nikita
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:10:33 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #tryhackme
Medium
What I Already Knew vs. What I Learned from TryHackMe Pre Security
When I started learning cybersecurity, I assumed that completing a beginner learning path would mean learning everything from scratch.
29 views
Daily Writeups
⤷ Title: When One Login Works Across Multiple Customers: Understanding Cross-Tenant Authentication Bypass
════════════════════════
𐀪 Author: Abhishek Bhujang
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 21:01:45 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #cybersecurity #information_security #bug_bounty
Medium
When One Login Works Across Multiple Customers: Understanding Cross-Tenant Authentication Bypass
How shared sessions, authentication mechanisms, and weak tenant isolation can expose one customer’s environment to another.
29 views
Daily Writeups
⤷ Title: Authentication & Authorization Eğitim Serisi — Bölüm 7: HTTP Basic, Digest, API Keys, HMAC İmzalı…
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 19:05:33 GMT
════════════════════════
⌗ Tags: #hmac #api_security #machine_to_machine #web_security #authentication
Medium
Authentication & Authorization Eğitim Serisi — Bölüm 7: HTTP Basic, Digest, API Keys, HMAC İmzalı İstekler
Modül II — Klasik Authentication
❤1
35 views
Daily Writeups
⤷ Title: Insufficient Session Expiration leads to Account Takeover via Password Change
════════════════════════
𐀪 Author: xlr9
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 23:43:31 GMT
════════════════════════
⌗ Tags: #session_management #cybersecurity #account_takeover #web_security #bug_bounty
Medium
Insufficient Session Expiration leads to Account Takeover via Password Change
Howdy fellers! During my recent bug hunting in VDP programs, I was analyzing a presentation platform and came across a vulnerability. At…
16 views
Daily Writeups
⤷ Title: Breaking BigBlueButton’s API With One Query Parameter — Inside CVE-2026–46353
════════════════════════
𐀪 Author: TAHON
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 23:30:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_exploitation
Medium
Breaking BigBlueButton’s API With One Query Parameter — Inside CVE-2026–46353
A single undocumented parameter turned every call to a video-conferencing platform’s API into an unauthenticated one.
18 views
Daily Writeups
⤷ Title: When One Integer Crosses the Authorization Boundary
════════════════════════
𐀪 Author: Insid_e
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 00:29:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #authorization #idor #web_security #api_security
Medium
When One Integer Crosses the Authorization Boundary
A cross-account authorization flaw hidden inside a preference endpoint
27 views