Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: ldapnomnom: Anonymously bruteforce Active Directory username
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:41:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #bruteforce Active Directory #ldapnomnom
Penetration Testing Tools
ldapnomnom: Anonymously bruteforce Active Directory username
LDAP Nom Nom: Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)
23 views
Daily Writeups
⤷ Title: Microsoft Launches MCP Server for AI to Access Official Documentation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 08:00:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #API #Developers #documentation #MCP server #Microsoft Learn #visual studio
Daily CyberSecurity
Microsoft Launches MCP Server for AI to Access Official Documentation
Microsoft's new MCP Server allows AI models to directly access official, real-time documentation from Microsoft Learn for enhanced accuracy and efficiency.
14 views
Daily Writeups
⤷ Title: Warning to Mac Studio M3 Ultra Owners: Postpone Your macOS Upgrade
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:52:16 +0000
════════════════════════
⌗ Tags: #Technology #Apple #M3 Ultra #Mac Studio #macOS #macOS 26.0 Tahoe #software update #tech bug
Daily CyberSecurity
Warning to Mac Studio M3 Ultra Owners: Postpone Your macOS Upgrade
Mac Studio M3 Ultra users are reporting failed upgrades to macOS 26.0 Tahoe due to a Neural Engine driver flaw. Users are advised to wait for a fix.
10 views
Daily Writeups
⤷ Title: You’re using GPT-5 wrong for hacking. Here’s how to be ahead of 99% of bug hunters
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:42:05 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #ai #gpt_5
Medium
You’re using GPT-5 wrong for hacking. Here’s how to be ahead of 99% of bug hunters
How to use GPT-5 as your reconnaissance engine, analysis assistant, and research wingman — ethically and effectively.
12 views
Daily Writeups
⤷ Title: Default Page to Admin Paths Exposure
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:41:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #technology #programming #infosec
Medium
Default Page to Admin Paths Exposure
Uncovering Hidden API
10 views
Daily Writeups
⤷ Title: SSRF Symphony: How I Turned a PDF Generator Into an Internal Network Spy
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:37:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #money #infosec #bug_bounty
Medium
🌍 SSRF Symphony: How I Turned a PDF Generator Into an Internal Network Spy
Free Link 🎈
9 views
Daily Writeups
⤷ Title: Extract — Load — Upload | A $20000 File Read Bug POC Methodology
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:32:35 GMT
════════════════════════
⌗ Tags: #hacking #gitlab #bug_bounty #bug_bounty_tips #file_reading
Medium
Extract — Load — Upload | A $20000 File Read Bug POC Methodology
Visual & Practical Breakdown of one of the highest paid arbitrary file read vulnerability POC
15 views
Daily Writeups
⤷ Title: Penetration Testing, Beginners To Expert!
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:28:53 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_writeup #bug_bounty #ethical_hacking #cybersecurity
Medium
Penetration Testing, Beginners To Expert!
This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration…
24 views
Daily Writeups
⤷ Title: “Day 26: The WebSocket Hijack — How I Eavesdropped on Every Customer Support Chat”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:27:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #technology #hacking #programming
Medium
“Day 26: The WebSocket Hijack — How I Eavesdropped on Every Customer Support Chat”
Exploiting the Trusting Handshake of Real-Time Communication
23 views
Daily Writeups
⤷ Title: Privacy Alert for ChatGPT Users: Delete Old Share Links & Clear Cached Chats
════════════════════════
𐀪 Author: Shah kaif
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:23:02 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #cybersecurity #security #chatgpt
Medium
🚨 Privacy Alert for ChatGPT Users: Delete Old Share Links & Clear Cached Chats
By Shah kaif | LinkedIn
13 views
Daily Writeups
⤷ Title: Web Cache Poisoning to Exploit a DOM Vulnerability via a Cache With Strict Cacheability Criteria
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:23:01 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #bug_bounty #bypass_strict_cache #dom_based_xss_via_cache #cache_poisoning_attack
Medium
Web Cache Poisoning to Exploit a DOM Vulnerability via a Cache With Strict Cacheability Criteria
Discover how attackers exploit strict cacheability criteria to poison cached responses and trigger DOM-based vulnerabilities.
22 views
Daily Writeups
⤷ Title: 16. Real Bug Bounty Stories (from My Reports)
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:21:14 GMT
════════════════════════
⌗ Tags: #infosec #secrets #medium #hacking #bug_bounty
Medium
16. Real Bug Bounty Stories (from My Reports)
From Curiosity to Critical Findings: Practical Bug Bounty Stories That Teach More Than Theory
14 views
Daily Writeups
⤷ Title: CTF → Pentest: Translating CTF Patterns into Real-World Exploits
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:20:44 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #capture_the_flag #cybersecurity #ctf
Medium
CTF → Pentest: Translating CTF Patterns into Real-World Exploits
Bridging the gap between capture-the-flag challenges and real-world pentests — showing how simple CTF patterns can uncover billion-dollar…
13 views
Daily Writeups
⤷ Title: You’re using GPT-5 wrong for hacking. Here’s how to be ahead of 99% of bug hunters
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:41:49 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #ai #gpt_5
Medium
You’re using GPT-5 wrong for hacking. Here’s how to be ahead of 99% of bug hunters
How to use GPT-5 as your reconnaissance engine, analysis assistant, and research wingman — ethically and effectively.
8 views
Daily Writeups
⤷ Title: Broken JWTs, Open Doors: How I Turned ‘None’ Algorithm into Full Admin Access
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:38:59 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #money #infosec #bug_bounty
Medium
🚪 Broken JWTs, Open Doors: How I Turned ‘None’ Algorithm into Full Admin Access
Hey there!😁
10 views
Daily Writeups
⤷ Title: QR Code IDOR Vulnerability in Razorpay
════════════════════════
𐀪 Author: Narayanan M
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:18:18 GMT
════════════════════════
⌗ Tags: #hackerone #payment_gateway_security #idor #osint #bug_bounty
Medium
QR Code IDOR Vulnerability in Razorpay
This post is about an IDOR (Insecure Direct Object Reference) vulnerability I discovered in Razorpay’s QR-code payment system, which I…
22 views
Daily Writeups
⤷ Title: My approach of subdomain takeover that pointing to Fastly (DNS Hijacking)
════════════════════════
𐀪 Author: Nishan Faiyaz
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:17:42 GMT
════════════════════════
⌗ Tags: #dns #cybersecurity #bug_bounty
Medium
My approach of subdomain takeover that pointing to Fastly (DNS Hijacking)
I begin in the name of Almighty Allah.
13 views
Daily Writeups
⤷ Title: A golden Code for Automated Recon — Bug Bounty
════════════════════════
𐀪 Author: Swetha
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:13:05 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #bug_bounty_tips #automation #coding
Medium
A golden Code for Automated Recon — Bug Bounty
Is there a simpler and easier way to recon a domain for bug bounty?
15 views
Daily Writeups
⤷ Title: How I get 1000$ bounty for Discovering Account Takeover in Android Application
════════════════════════
𐀪 Author: TEAM DH49
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:03:10 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bugs #bug_zero #bug_bounty #ethical_hacking
Medium
How I get 1000$ bounty for Discovering Account Takeover in Android Application
In this blog post, I will share my experience of discovering a critical account takeover vulnerability in an Android application which has…
13 views
Daily Writeups
⤷ Title: CVE-2025–55912 — ClipBucket ≤ 5.5.0 — Unauthenticated Arbitrary File Upload → RCE
════════════════════════
𐀪 Author: Mukundsinh Solanki
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 05:59:03 GMT
════════════════════════
⌗ Tags: #penetration_testing #exploit #cybersecurity #web_security #bug_bounty
Medium
CVE-2025–55912 — ClipBucket ≤ 5.5.0 — Unauthenticated Arbitrary File Upload → RCE
Hello — my name is Mukundsinh Solanki, from Gujarat, India. I am a Penetration Tester with 8+ years’ experience in discovering and helping…
16 views
Daily Writeups
⤷ Title: Cracking Forensics CTFs 2.0 — picoCTF
════════════════════════
𐀪 Author: Swetha
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 07:39:21 GMT
════════════════════════
⌗ Tags: #hacking #ctf #learning #games #infosec
Medium
Cracking Forensics CTFs 2.0 — picoCTF
follow up of Cracking Forensics CTFs 1.0 — picoCTF https://medium.com/@swethas274/8b143d12b615
12 views