Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: I Found a High-Severity Bug by Reading a JavaScript File for 10 Minutes
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 15:56:43 GMT
════════════════════════
⌗ Tags: #hacking #reconnaissance #bug_bounty #cybersecurity #bugs
Medium
I Found a High-Severity Bug by Reading a JavaScript File for 10 Minutes
Most of my best findings don’t come from fuzzing, exotic payloads, or chaining ten obscure techniques together. They come from reading…
41 views
Daily Writeups
⤷ Title: Information Disclosure in Error Messages — A New Series Begins lab 1
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 21:51:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development #bughhunter #bugs
Medium
Information Disclosure in Error Messages — A New Series Begins lab 1
Lab 1. The first lab in my Information Disclosure series. And it teaches you something every hacker learns early: a website will tell you…
27 views
Daily Writeups
⤷ Title: READING The JavaScript Gave Me a Cross-Tenant Write + SSRF
════════════════════════
𐀪 Author: httpzuz
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 15:54:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bugs #ssrf #bug_bounty_tips
Medium
READING The JavaScript Gave Me a Cross-Tenant Write + SSRF 🔥
Hey Guys and Welcome Back! 👋
35 views
Daily Writeups
⤷ Title: The Database That Couldn’t Keep a Secret
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 21:11:17 GMT
════════════════════════
⌗ Tags: #bugs #bug_bounty_writeup #website #bug_bounty #bug_bounty_tips
Medium
The Database That Couldn’t Keep a Secret
I asked a MySQL server one rude question. It answered with its full name, version, and operating system — in front of everyone
34 views
Daily Writeups
⤷ Title: السلام عليكم
════════════════════════
𐀪 Author: Abdlalicc
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 21:37:46 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bugs #bug_hunting #bug_bounty #bug_bounty_writeup
Medium
السلام عليكم 👋
Critical BAC tips
30 views
Daily Writeups
⤷ Title: Bypassing Enterprise SSO via a Forgotten Source Map: A Bug Bounty Story
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 14:10:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #hacker #bug_bounty_writeup #bugs
Medium
Bypassing Enterprise SSO via a Forgotten Source Map: A Bug Bounty Story
When you look at a bug bounty scope with 15+ root domains, it’s easy to get overwhelmed. Most hunters will fire off their automated…
20 views
Daily Writeups
⤷ Title: How I Found an Account Takeover (ATO) in Swisscom
════════════════════════
𐀪 Author: m0ro23
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 02:14:53 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #penetration_testing #bugs #bug_bounty
Medium
How I Found an Account Takeover (ATO) in Swisscom
Password Reset Token Reuse → Account Takeover
6 views
Daily Writeups
⤷ Title: How a Trusted Header Turned Into an Open Redirect in Telekom’s System
════════════════════════
𐀪 Author: m0ro23
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 03:00:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugs #bug_bounty_writeup #penetration_testing #bug_bounty
Medium
How a Trusted Header Turned Into an Open Redirect in Telekom’s System
Host Header Injection → Open Redirect
15 views
Daily Writeups
⤷ Title: INSTAGRAM Account Takeover 0-click Username and email Collision in Password Recover $130k+ bounty
════════════════════════
𐀪 Author: Ali
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 18:19:50 GMT
════════════════════════
⌗ Tags: #security #bugs #instagram #meta #bug_bounty
Medium
INSTAGRAM Account Takeover 0-click Username and email Collision in Password Recover
Hello everyone,
12 views
Daily Writeups
⤷ Title: Android Pentesting in 2026: The Only Guide You’ll Need to Go From Emulator to Exploit
════════════════════════
𐀪 Author: Makishima_ShogO
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 09:08:06 GMT
════════════════════════
⌗ Tags: #android_pentesting #mobile_pentesting #bug_bounty #apk_testing #bugs
Medium
Android Pentesting in 2026: The Only Guide You’ll Need to Go From Emulator to Exploit
A field-tested runbook — Android Studio, ADB, Frida, Objection, and Burp Suite — mapped to the OWASP MASTG. Not another “install these five…
36 views