Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.55K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.55K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Tue, 07 Mar 2023 08:12:20 GMT
———————————————
✏️Title: Don’t Send a Message to anyone Before Reading This: Account Takeover Vulnerability [External Audit]
———————————————
📎Link: https://medium.com/p/cf584a0c983c
———————————————
Tags: #bug_bounty #penetration_testing #response_manipulation #account_takeover #authentication_bypass

[Account Takeover] Don’t Send a Message to anyone Before Reading This [External Audit]

The security of a web application relies heavily on the strength and effectiveness of its authentication and authorization mechanisms. If…

16 views09:51

🔖New Writeup❗️
———————————————
🗓Date: Fri, 29 Sep 2023 14:57:03 GMT
———————————————
✏️Title: Response Manipulation to Account Takeover
———————————————
📎Link: https://medium.com/p/f5a1dfe1d878
———————————————
Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #response_manipulation

Response Manipulation to Account Takeover

The registration and entry procedures were carried out via phone numbers and After finishing my registration, I attempted to …

18 views17:02

⤷ Title: Authentication Bypass via Response Manipulation
════════════════════════
𐀪 Author: Ahmed Salah
════════════════════════
ⴵ Time: Wed, 08 Jan 2025 23:35:03 GMT
════════════════════════
⌗ Tags: #typescript #response_manipulation #programming #authentication_bypass #cybersecurity

Authentication Bypass via Response Manipulation

Authentication Bypass via Response Manipulation

18 views00:04

⤷ Title: 2FA Bypass via Response manipulation
════════════════════════
𐀪 Author: 0mex
════════════════════════
ⴵ Time: Fri, 17 Jan 2025 16:32:08 GMT
════════════════════════
⌗ Tags: #2fa_bypass #2fa_authentication #otp_bypass #bug_bounty_writeup #response_manipulation

2FA Bypass via Response manipulation

37 views17:04

⤷ Title: Waiting for admin approve , I don’t think so !
════════════════════════
𐀪 Author: Abdallah Ehab
════════════════════════
ⴵ Time: Sat, 26 Apr 2025 14:50:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hunting #bug_bounty #response_manipulation

Waiting for admin approval, I don’t think so !

Have you ever posted a comment on a website only to be told,

17 views16:04

⤷ Title: Waiting for admin approve , I don’t think so !
════════════════════════
𐀪 Author: Abdallah Ehab
════════════════════════
ⴵ Time: Sat, 26 Apr 2025 14:50:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hunting #bug_bounty #response_manipulation

Waiting for admin approval, I don’t think so !

Have you ever posted a comment on a website only to be told,

48 views20:07

⤷ Title: Waiting for admin approve , I don’t think so !
════════════════════════
𐀪 Author: Abdallah Ehab
════════════════════════
ⴵ Time: Sat, 26 Apr 2025 14:50:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hunting #bug_bounty #response_manipulation

Waiting for admin approval, I don’t think so !

Have you ever posted a comment on a website only to be told,

21 views22:16

⤷ Title: Privilege Escalation via Response Manipulation
════════════════════════
𐀪 Author: MR SHAN
════════════════════════
ⴵ Time: Fri, 16 May 2025 18:59:37 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #response_manipulation #burpsuite #cybersecurity #bug_bounty

Privilege Escalation via Response Manipulation

How I managed to Escalate Privileges through Response Manipulation while doing a pentest.

30 views20:04

⤷ Title: Access Bank Account Information via Response Manipulation
════════════════════════
𐀪 Author: brbr0s
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 14:16:54 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #broken_access_control #response_manipulation #bug_bounty

Access Bank Account Information via Response Manipulation

I will demonstrate how I, as a collaborator, can Access Administrator’s Bank Account Information via Response Manipulation in BBP on…

12 views15:04

⤷ Title: Access Bank Account Information via Response Manipulation
════════════════════════
𐀪 Author: brbr0s
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 15:35:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #broken_access_control #response_manipulation

Access Bank Account Information via Response Manipulation

Hi mates, I’m Mahmoud — aka brbr0s — . I’m a bug hunter who’s always trying to learn more and get better at what I do. I’m mainly focused…

18 views16:04

⤷ Title: “Trust, but Verify: The Hidden Dangers of Response Manipulation in Modern Applications”
════════════════════════
𐀪 Author: Abdullah Kala
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 10:57:50 GMT
════════════════════════
⌗ Tags: #mobile_security #penetration_testing #application_security #business_logic #response_manipulation

“Trust, but Verify: The Hidden Dangers of Response Manipulation”

First of all, I want to mention a covert threat that has been appearing with increasing frequency. As you know, business-logic…

15 views12:04

⤷ Title: “Trust, but Verify: The Hidden Dangers of Response Manipulation”
════════════════════════
𐀪 Author: Abdullah Kala
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 10:57:50 GMT
════════════════════════
⌗ Tags: #mobile_security #penetration_testing #application_security #business_logic #response_manipulation

“Trust, but Verify: The Hidden Dangers of Response Manipulation”

First of all, I want to mention a covert threat that has been appearing with increasing frequency. As you know, business-logic…

25 views16:03

⤷ Title: How a Single Response Manipulation Led to Admin Takeover — Tamil Nadu Government — Police…
════════════════════════
𐀪 Author: Gokuleswaran B
════════════════════════
ⴵ Time: Sat, 01 Nov 2025 15:49:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #response_manipulation #bug_bounty_tips #pentesting #appsec

How a Single Response Manipulation Led to Admin Takeover — Tamil Nadu Government — Police…

You won’t believe this — I walked into an admin dashboard without any exotic exploit, zero fuzzing, and no fancy payloads. Just a normal…

11 views16:04

⤷ Title: Don’t Trust the Response : How Response Manipulation Exposed a Business Logic Flaw
════════════════════════
𐀪 Author: Killua199
════════════════════════
ⴵ Time: Sat, 15 Nov 2025 10:56:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #owasp #response_manipulation #cybersecurity

Don’t Trust the Server: How Response Manipulation Exposed a Business Logic Flaw

الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعد

41 views12:04

⤷ Title: Http Response Manipulation
════════════════════════
𐀪 Author: Neeraj kath
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 09:53:53 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #bug_bounty #response_manipulation #owasp

Http Response Manipulation

Most security testing focuses on what users send to the server.
Far fewer people ask an equally important question:

35 views10:03

⤷ Title: How a Simple Misconfiguration in the Invitation Link Led Me to Full Account Takeover
════════════════════════
𐀪 Author: sudo
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 17:08:19 GMT
════════════════════════
⌗ Tags: #response_manipulation #account_takeover #broken_access_control #auth_bypass #bug_bounty

How a Simple Misconfiguration in the Invitation Link Led Me to Full Account Takeover

“بِسْمِ اللَّهِ، وَالْحَمْدُ لِلَّهِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِ اللَّهِ، اللَّهُمَّ عَلِّمْنَا مَا يَنْفَعُنَا، وَانْفَعْنَا…

26 views18:03

⤷ Title: Response Manipulation Leading to Free Plan Limit Bypass
════════════════════════
𐀪 Author: Mahmoud Gamal
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 04:47:49 GMT
════════════════════════
⌗ Tags: #business_logic #writeup #bug_bounty #cybersecurity #response_manipulation

Response Manipulation Leading to Free Plan Limit Bypass

19 views05:04

⤷ Title: I tried to log into the website using the Client-Side Access Control bypassing technique.
════════════════════════
𐀪 Author: Billy Elvonda Aron Umpel
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 03:12:07 GMT
════════════════════════
⌗ Tags: #web_exploitation #hacking #response_manipulation

I tried to log into the website using the Client-Side Access Control bypassing technique.

I tested the website with permission from the website owner.

21 views05:04