Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: {{7*7}} = 49: A Bug Hunter’s Guide to Server-Side Template Injection
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:26:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #web_development #bug_bounty_writeup
Medium
{{7*7}} = 49: A Bug Hunter’s Guide to Server-Side Template Injection
How “Hello, {name}” turns into remote code execution.
17 views
Daily Writeups
⤷ Title: How a Simple Wayback Search Revealed 44,000+ Exposed Job Applicant Emails
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:25:13 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty_writeup #cybersecurity #wayback_machine #bug_bounty
Medium
How a Simple Wayback Search Revealed 44,000+ Exposed Job Applicant Emails
A simple Wayback Machine recon uncovered archived pages exposing an estimated 44,560 job applicant emails, highlighting the risks of…
11 views
Daily Writeups
⤷ Title: My First Bug Bounty : A Beginner's Web Security Investigation
════════════════════════
𐀪 Author: BHARANIDHARAN
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:17:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #sql_injection #cybersecurity #bug_bounty
Medium
My First Bug Bounty : A Beginner's Web Security Investigation
A beginner's journey from self-doubt and endless overthinking to taking action and conducting my first real web security investigation.
9 views
Daily Writeups
⤷ Title: Free Resources Every Broke College Student Can Use to Learn Hacking
════════════════════════
𐀪 Author: ATNO For Cybersecurity | Hacking
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 10:16:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty #pentesting #freerepacks
Medium
Free Resources Every Broke College Student Can Use to Learn Hacking
No budget. No problem. Some of the best security professionals learned everything on free resources.
8 views
Daily Writeups
⤷ Title: From a Single WAF Bypass to 58,000+ Exposed Media Objects
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:51:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_application_security #penetration_testing #information_security
Medium
From a Single WAF Bypass to 58,000+ Exposed Media Objects
A bug bounty case study in chaining overlooked misconfigurations into a full attack surface
24 views
Daily Writeups
⤷ Title: My First Valid Bug: A Broken Object Level Authorization (BOLA) in Customer API
════════════════════════
𐀪 Author: Abobakrmohamed
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:20:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunter #web_app_pentesting #hacking #find_your_first_bug
Medium
My First Valid Bug: A Broken Object Level Authorization (BOLA) in Customer API
After months of grinding through labs, courses, and public program testing without a confirmed finding, I finally landed my first valid bug…
20 views
Daily Writeups
⤷ Title: Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:40:43 GMT
════════════════════════
⌗ Tags: #bug_bounty #rce #bug_bounty_writeup #bug_bounty_tips #bugs
Medium
Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
1. Introduction
18 views
Daily Writeups
⤷ Title: Revisiting JWT Token Forgery Attack on Recent Bounty Target
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:25:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #jwt_exploitation #token #bug_bounty_writeup
Medium
Revisiting JWT Token Forgery Attack on Recent Bounty Target
alg=none x Attacker-Controlled Object Check
18 views
Daily Writeups
⤷ Title: Shadow AI: The Breach Nobody Approved, Signed Off On, or Even Saw Coming
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:41:01 GMT
════════════════════════
⌗ Tags: #ai #bug_bounty_writeup #bug_bounty #security #cybersecurity
Medium
Shadow AI: The Breach Nobody Approved, Signed Off On, or Even Saw Coming
A developer at a mid-sized fintech company pasted a chunk of proprietary source code into a free AI chatbot last spring, just to get a…
15 views
Daily Writeups
⤷ Title: PortSwigger File Path Traversal Lab Solution, Simple Case
════════════════════════
𐀪 Author: Arham H.B
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 15:26:43 GMT
════════════════════════
⌗ Tags: #portswigger #portswigger_lab #web_security #cybersecurity #bug_bounty
Medium
PortSwigger File Path Traversal Lab Solution, Simple Case
Web Security Academy by PortSwigger
5 views