Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: TryHackMe — Reset Walkthrough
════════════════════════
𐀪 Author: Cyber Anom
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 17:02:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #offensive_security #pentesting #oscp_preparation #tryhackme
Medium
TryHackMe — Reset Walkthrough
# Context
9 views
Daily Writeups
⤷ Title: Stop Guessing: How to Systematically Evaluate OpenAI Assistants with Promptfoo
════════════════════════
𐀪 Author: Mahesh G
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 16:31:24 GMT
════════════════════════
⌗ Tags: #secuity #ai #generative_ai_tools #penetration_testing
Medium
Stop Guessing: How to Systematically Evaluate OpenAI Assistants with Promptfoo
The Problem with Trial and Error
11 views
Daily Writeups
⤷ Title: Review : Pre Security Learning Path — Try Hack Me
════════════════════════
𐀪 Author: InfernoRadar
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 16:39:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #pre_security #tryhackme #personal_experience
Medium
Review : Pre Security Learning Path — Try Hack Me
TryHackMe is one of the go to place if you want to try you hand at cybersecurity or CTFs practice. THM also provides quite a large number…
16 views
Daily Writeups
⤷ Title: Request Throttling in Spring Boot Filters for High Traffic Endpoints
════════════════════════
𐀪 Author: Alexander Obregon
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 17:32:03 GMT
════════════════════════
⌗ Tags: #spring_boot #api_security #programming #java #filters
Medium
Request Throttling in Spring Boot Filters for High Traffic Endpoints
High traffic APIs often face the challenge of too many incoming requests reaching sensitive endpoints in a short burst of time. This can…
29 views
Daily Writeups
⤷ Title: crAPI: A Playground for API Hacking
════════════════════════
𐀪 Author: cyb3rloud
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 16:04:54 GMT
════════════════════════
⌗ Tags: #api_security #webapi
Medium
crAPI: A Playground for API Hacking
Before diving into the vulnerabilities, it’s important to understand the environment in which you conducted your tests. The Completely…
34 views
Daily Writeups
⤷ Title: From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 22:49:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Server-Side Template Injection (SSTI) Hackvisor Lab
════════════════════════
𐀪 Author: Y0s_0x_IBM
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:42:18 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #hackviser
Medium
Server-Side Template Injection (SSTI) Hackvisor Lab
Hello And Welcome again my friends this dialogue is about how I accessed the flag on /home/secret.txt By injectec SSTI Full Senario
29 views
Daily Writeups
⤷ Title: 0-click Account Takeover via Punycode
════════════════════════
𐀪 Author: Saif Eldin
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 18:33:05 GMT
════════════════════════
⌗ Tags: #bug_bounty_program #bug_bounty_hunter #bug_bounty_writeup #bug_bounty #bug_bounty_tips
Medium
0-click Account Takeover via Punycode
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
اللَّهُمَّ صَلِّ وَسَلِّمْ وَبَارِكْ عَلَى سَيِّدِنَا مُحَمَّدٍ
28 views
Daily Writeups
⤷ Title: Business Logic Error - Bypassing Payment with Test Cards
════════════════════════
𐀪 Author: Umanhonlen Gabriel
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 18:10:50 GMT
════════════════════════
⌗ Tags: #ai #bug_bounty #hacker #information_security #testing
Medium
Business Logic Error - Bypassing Payment with Test Cards
Business logic bugs are sneaky. They’re not about crashing servers or SQLi, but about using an app exactly as intended but in a way that…
17 views
Daily Writeups
⤷ Title: Unlimited File Upload Vulnerability: From Images to Web Threats
════════════════════════
𐀪 Author: Muhammad Adnan Apriliyansyah
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 18:03:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #technology #infosec #bug_hunting
Medium
Unlimited File Upload Vulnerability: From Images to Web Threats
Many web applications provide a file upload feature, but insufficient content validation often leads to serious security vulnerabilities…
17 views
Daily Writeups
⤷ Title: Ehxb | Path Traversal Vulnerabilities
════════════════════════
𐀪 Author: Ehxb
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 17:42:04 GMT
════════════════════════
⌗ Tags: #hackthebox #bug_bounty #hacking #tryhackme #ctf
Medium
Ehxb | Path Traversal Vulnerabilities: From Discovery to Automation
When I first started learning about web security, path traversal was one of those vulnerabilities that seemed almost too simple to be real…
13 views
Daily Writeups
⤷ Title: Proof by Exploitation: Shannon’s Approach to Autonomous Penetration Testing
════════════════════════
𐀪 Author: Parathan Thiyagalingam
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:22:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #machine_learning #artificial_intelligence #penetration_testing
11 views
Daily Writeups
⤷ Title: I found the original content difficult to read and understand, so I decided to leverage a large…
════════════════════════
𐀪 Author: Khurshid Hassan
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:08:15 GMT
════════════════════════
⌗ Tags: #secure_coding #owasp_api_security_top_10 #devsecops #owasp_asvs #application_security
Medium
I found the original content difficult to read and understand, so I decided to leverage a large language model (LLM) to generate…
All credit goes to original creatores at https://github.com/OWASP/ASVS
11 views
Daily Writeups
⤷ Title: Bloodstream Firmware: The Next Frontier of Self-Modification
════════════════════════
𐀪 Author: Aeon Dexrane
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:08:17 GMT
════════════════════════
⌗ Tags: #transhumanism #biology #biohacking #future_technology #hacking
Medium
Bloodstream Firmware: The Next Frontier of Self-Modification
Imagine if your body could run a microkernel in your veins. Imagine a code layer beneath the skin, rewriting, optimizing, patching your…
12 views
Daily Writeups
⤷ Title: PortSwigger mystery lab write-up.
════════════════════════
𐀪 Author: Hubert
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 18:43:51 GMT
════════════════════════
⌗ Tags: #portswigger_lab #ctf_writeup #hacking #cybersecurity #portswigger
Medium
PortSwigger mystery lab write-up.
This is a description the steps which I took to solve PortSwigger lab about SQL injection [1]: Blind SQL injection with out-of-band data…
13 views
Daily Writeups
⤷ Title: Hacking for Hidden Access And Secret Functions in the Moxa NPort Series
════════════════════════
𐀪 Author: Marcel Rick-Cen
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:50:08 GMT
════════════════════════
⌗ Tags: #hardware_hacking #cybersecurity #penetration_testing #security #ot_security
Medium
Hacking for Hidden Access And Secret Functions in the Moxa NPort Series
We uncover hidden debug menus and bootloader access in Moxa NPort devices — where “maintenance mode” meets hardware hackers.
13 views
Daily Writeups
⤷ Title: Slowloris vs. Check Loris — Boring a Server to Death and Back Again
════════════════════════
𐀪 Author: A hacked box
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:49:57 GMT
════════════════════════
⌗ Tags: #scripting #cybersecurity #cyberattack
Medium
Slowloris vs. Check Loris — Boring a Server to Death and Back Again
You’ve probably heard of Slowloris — the attack that bores a server to death. A true Layer 7 assassin. It doesn’t flood ports or crash…
13 views
Daily Writeups
⤷ Title: ⚠️ Warning: You’re Probably Using JWT Wrong — A Deep Dive into Its Hidden Dangers
════════════════════════
𐀪 Author: Indrajit
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:47:20 GMT
════════════════════════
⌗ Tags: #programming #tech #spring_boot #authentication #cybersecurity
Medium
⚠️ Warning: You’re Probably Using JWT Wrong — A Deep Dive into Its Hidden Dangers
Alot of us developers love JWTs for that “stateless” vibe, but beneath all that shiny surface, there are some pretty big security issues
18 views
Daily Writeups
⤷ Title: IT Security Audit: Strengthening Your Organization’s Digital Defense
════════════════════════
𐀪 Author: SafeAeon Inc.
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:45:46 GMT
════════════════════════
⌗ Tags: #it_security_audit #safeaeon #cybersecurity
Medium
IT Security Audit: Strengthening Your Organization’s Digital Defense
In today’s connected world, cyber threats can strike at any moment, from ransomware and phishing attacks to insider data leaks. Businesses…
22 views
Daily Writeups
⤷ Title: [CyberDefenders Write-up] WebStrike lab
════════════════════════
𐀪 Author: OxMotaw3
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:41:02 GMT
════════════════════════
⌗ Tags: #threat_hunting #blue_team #cybersecurity #network_forensics #ctf_writeup
Medium
[CyberDefenders Write-up] WebStrike lab
Scenario: A suspicious file was identified on a company web server, raising alarms within the intranet. The Development team flagged the…
14 views
Daily Writeups
⤷ Title: HackTheBox — Puppy (WriteUp)
════════════════════════
𐀪 Author: Emre Özdemir
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 19:31:22 GMT
════════════════════════
⌗ Tags: #ctf_writeup #offsec #hackthebox #cybersecurity
Medium
HackTheBox — Puppy (WriteUp)
Merhaba,
9 views