Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sat, 30 Sep 2023 20:08:56 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: IDOR and Mass Assignment attacks leads to Full Account Takeover of Internal Employees
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/a59cd998e568
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #bug_bounty #mass_assignment #security #idor_vulnerability
Medium
IDOR and Mass Assignment attacks leads to Full Account Takeover of Internal Employees
Hi everyone, I hope you are doing well. It’s been a while since I last published an article about my findings. In this article, I will…
15 views
Daily Writeups
β€· Title: Alternative Mobilesβ€Šβ€”β€Šindependent replacements for Android- and iOS-based smartphones
════════════════════════
π€ͺ Author: 0trust0day
════════════════════════
β΄΅ Time: Fri, 06 Jun 2025 10:47:04 GMT
════════════════════════
βŒ— Tags: #mass_surveillance #volla_x23 #volla_smartphones #cybersecurity #ubuntutouch
Medium
Alternative Mobiles β€” independent replacements for Android- and iOS-based smartphones
The privacy concerns surrounding mainstream devices running Apple’s iOS, Google’s Android, or Huawei’s HarmonyOS are undeniable. These…
20 views
Daily Writeups
β€· Title: From Fiber Taps to Zero-Click Exploits: The True Power of NSA, CIA & Unit 8200
════════════════════════
π€ͺ Author: Muhammad Sameer
════════════════════════
β΄΅ Time: Sat, 02 Aug 2025 16:42:36 GMT
════════════════════════
βŒ— Tags: #technology_and_society #privacy #digital_rights #cybersecurity #mass_surveillance
Medium
From Fiber Taps to Zero-Click Exploits: The True Power of NSA, CIA & Unit 8200
1. Introduction
31 views
Daily Writeups
β€· Title: Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sat, 06 Dec 2025 08:06:06 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #3xK GmbH #GlobalProtect #GreyNoise #Mass Scanning #Palo Alto Networks #reconnaissance #SonicWall #VPN security
Daily CyberSecurity
Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints
GreyNoise detected a coordinated mass scanning campaign where 7,000+ IPs (from 3xK GmbH) probed Palo Alto GlobalProtect portals and SonicWall SonicOS API endpoints using identical client fingerprints.
35 views
Daily Writeups
β€· Title: Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 29 Dec 2025 00:35:07 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Adobe ColdFusion #Christmas 2025 #CTG Server Limited #CVE_2017_9841 #CVE_2023_26360 #cyber_espionage #GreyNoise #IAB #initial access broker #Japan_based Threat #java #Mass Exploitation
Daily CyberSecurity
Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.
14 views
Daily Writeups
β€· Title: Mass Assignment leads to Account Takeover and DoS
════════════════════════
π€ͺ Author: Rahul Singh Chauhan
════════════════════════
β΄΅ Time: Sat, 17 Jan 2026 05:02:56 GMT
════════════════════════
βŒ— Tags: #bug_bounty #account_takeover #mass_assignment #cybersecurity #application_security
Medium
Mass Assignment leads to Account Takeover and DoS
In this blog post, I’ll talk about a mass assignment vulnerability leading to account takeover and denial of service.
38 views
Daily Writeups
β€· Title: How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
════════════════════════
π€ͺ Author: Mahmoud Rashed
════════════════════════
β΄΅ Time: Fri, 06 Feb 2026 14:49:34 GMT
════════════════════════
βŒ— Tags: #yeswehack #business_logic_bug #bug_bounty #web_security #mass_assignment
Medium
How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
TL;DR
22 views
Daily Writeups
β€· Title: How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
════════════════════════
π€ͺ Author: Mohamed Saied
════════════════════════
β΄΅ Time: Fri, 06 Feb 2026 14:48:38 GMT
════════════════════════
βŒ— Tags: #mass_assignment #bug_bounty #yeswehack #business_logic_bug #web_security
Medium
How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
Written by Mohamed Saied | Age 21 | Jr. Penetration Tester
16 views
Daily Writeups
β€· Title: Exploiting a Mass Assignment Vulnerability
════════════════════════
π€ͺ Author: Bash Overflow
════════════════════════
β΄΅ Time: Sat, 21 Feb 2026 09:46:42 GMT
════════════════════════
βŒ— Tags: #rest_api_testing #bug_bounty #mass_assignment #business_logic #api_security_testing
Medium
Exploiting a Mass Assignment Vulnerability
How a Hidden API Parameter Turned a $1337 Jacket Into a Free Purchase.
22 views
Daily Writeups
β€· Title: Red Lines in the Rubble: OpenAI Enters the β€œDepartment of War” as Claude AI Powers Strikes on Iran
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 03 Mar 2026 03:35:28 +0000
════════════════════════
βŒ— Tags: #Technology #Anthropic #autonomous weapons #Claude AI #Department of Defense #Department of War #geopolitical conflict #iPhone 17e #mass surveillance #Military AI #OpenAI #Sam Altman #Tech News 2026
Daily CyberSecurity
Red Lines in the Rubble: OpenAI Enters the "Department of War" as Claude AI Powers Strikes on Iran
OpenAI signs a classified deal with the "Department of War" as the US military continues using banned Anthropic tech for high-stakes airstrikes in Iran.
10 views
Daily Writeups
β€· Title: The Ethics Embargo: Why the Pentagon Blacklisted Anthropic and the Tech Giants Struck Back
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 09 Mar 2026 03:32:23 +0000
════════════════════════
βŒ— Tags: #Technology #AI Ethics #Anthropic #autonomous weapons #AWS #Claude AI #Department of Defense #Google Cloud #mass surveillance #Microsoft Azure #OpenAI #Pentagon #supply chain risk #Tech News 2026 #xAI
Daily CyberSecurity
The Ethics Embargo: Why the Pentagon Blacklisted Anthropic and the Tech Giants Struck Back
The Pentagon brands Anthropic a "Supply-Chain Risk" over ethical AI refusals. See how Microsoft, Google, and Amazon are defying the military to save Claude.
13 views
Daily Writeups
β€· Title: Mass Assignment - When Your API Lets Users Write Their Own Permission Slip
════════════════════════
π€ͺ Author: Rufus Kehinde
════════════════════════
β΄΅ Time: Thu, 19 Mar 2026 18:36:21 GMT
════════════════════════
βŒ— Tags: #mass_assignment #api #cybersecurity #application_security #fintech
Medium
Mass Assignment - When Your API Lets Users Write Their Own Permission Slip
Some vulnerabilities require sophisticated tools and deep technical knowledge to exploit. This one requires a curious mind, a browser, and…
39 views
Daily Writeups
β€· Title: Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 19 May 2026 02:49:56 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Botnet Takeover #Crowdsec #CVE_2024_9643 #F3x36 #Four_Faith #hardcoded credentials #Industrial Cellular Router #infosec #IoT security #Mass Exploitation #Nuclei Template
Daily CyberSecurity
Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
Urgent: CrowdSec warns CVE-2024-9643 in Four-Faith routers has hit mass exploitation phase. Attackers abuse hardcoded logins to build botnets. Patch now!
11 views