Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Cat-and-Mouse Game of a Cloud Metadata SSRF Vulnerability
════════════════════════
𐀪 Author: Ramshath
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 18:18:31 GMT
════════════════════════
⌗ Tags: #ssrf #hacking #cybersecurity #security #bug_bounty
Medium
The Cat-and-Mouse Game of a Cloud Metadata SSRF Vulnerability
How a friendly “Create REST API” button turned into a path to cloud secrets — and why simple fixes kept failing.
21 views
Daily Writeups
⤷ Title: Crack the hash|THM..|Cyber Exploration Writeup.. |Day-8
════════════════════════
𐀪 Author: Deepika B
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:31:51 GMT
════════════════════════
⌗ Tags: #hacking #encryption #learning #tryhackme #tryhackme_walkthrough
Medium
Crack the hash|THM..|Cyber Exploration Writeup.. |Day-8
Cracking hashes challenges…
12 views
Daily Writeups
⤷ Title: HTB API Attacks Module: Broken Authentication Section Exercise
════════════════════════
𐀪 Author: gabrielschwartz
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:18:12 GMT
════════════════════════
⌗ Tags: #hackthebox #hacking #owasp_api_security_top_10 #broken_authentication
Medium
HTB API Attacks Module: Broken Authentication Section Exercise
My Journey to the API Attacks Module
12 views
Daily Writeups
⤷ Title: Implementing the Etherhiding technique
════════════════════════
𐀪 Author: Onhexgroup
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 18:54:11 GMT
════════════════════════
⌗ Tags: #etherhiding #smart_contracts #cybersecurity #infosec #solidity
Medium
Implementing the Etherhiding technique
Google recently published reports about a new technique called “Etherhiding.” The reports explain how the threat actors UNC5142 and UNC5342…
8 views
Daily Writeups
⤷ Title: How to recover your Facebook account after losing your phone number and cannot receive any code
════════════════════════
𐀪 Author: Lucia Banjo
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:54:12 GMT
════════════════════════
⌗ Tags: #data_recovery #cybersecurity #social_media #recovery
Medium
How to recover your Facebook account after losing your phone number and cannot receive any code
If you’ve lost access to the phone number associated with your Facebook account and can’t receive the verification code, you can still try…
8 views
Daily Writeups
⤷ Title: How to protect your data from phishing attacks
════════════════════════
𐀪 Author: Lucia Banjo
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:50:55 GMT
════════════════════════
⌗ Tags: #information_security #data_security #cybersecurity #social_media
Medium
How to protect your data from phishing attacks
Protecting yourself from phishing attacks involves adopting a combination of awareness, caution, and security practices. Here are some key…
10 views
Daily Writeups
⤷ Title: Phishing Attack Overview
════════════════════════
𐀪 Author: Lucia Banjo
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:49:24 GMT
════════════════════════
⌗ Tags: #data_security #social_media #information_security #cybersecurity
Medium
Phishing Attack Overview
Phishing attack is a form of cyber attack where the attacker attempts to trick individuals into divulging sensitive information such as…
6 views
Daily Writeups
⤷ Title: Creepy Candy Cam by Ring
════════════════════════
𐀪 Author: Rhiannon Williams
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:32:44 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #privacy #tech #technology
Medium
Creepy Candy Cam by Ring
Nothing says Goblins and Ghouls like filming the neighborhood children on Halloween, like an absolute creep. Terrible product idea, Ring.
7 views
Daily Writeups
⤷ Title: Simple Cybersecurity Tips for Every Online Business
════════════════════════
𐀪 Author: IT_Engineer
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:19:03 GMT
════════════════════════
⌗ Tags: #website_protection #small_business #data_protection #cybersecurity #cloud_security_services
Medium
Simple Cybersecurity Tips for Every Online Business
In today’s digital marketplace, running an online business is not just about sales, service delivery, or customer experience — it’s about…
9 views
Daily Writeups
⤷ Title: Building Effective Threat Hunting Queries For Phishing Campaigns
════════════════════════
𐀪 Author: RileyHv
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:17:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #threat_hunting
Medium
Building Effective Threat Hunting Queries For Phishing Campaigns
Phishing is the most prevalent threat facing organisations today, and while prevention is essential, phishing threat hunting (proactive…
13 views
Daily Writeups
⤷ Title: What Is Mobile App Pentesting?
════════════════════════
𐀪 Author: 0xnref
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:09:01 GMT
════════════════════════
⌗ Tags: #web_application_security #cybersecurity #cyber_security_awareness #mobile_app_development #mobile
Medium
📱🔍 What Is Mobile App Pentesting? A Simple Breakdown (And How It Really Compares to Web App Testing)
If you’ve ever done web app pentesting and thought, “Mobile apps can’t be that different…” — you’re in for a surprise.
9 views
Daily Writeups
⤷ Title: Why One Cyber Attack Can Shake an Entire Industry？
════════════════════════
𐀪 Author: Digital Trust Journal
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 18:59:32 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Why One Cyber Attack Can Shake an Entire Industry？
In September 2025, Jaguar Land Rover (JLR) suffered a major cyber-attack that forced its UK factories to shut down for seven weeks.
12 views
Daily Writeups
⤷ Title: The New Reality of Compliance: Data Must Live Where It’s Born
════════════════════════
𐀪 Author: planck_deeptech
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 18:55:46 GMT
════════════════════════
⌗ Tags: #compliance #cybersecurity #tech_infrastructure #planck #data
Medium
The New Reality of Compliance: Data Must Live Where It’s Born
What used to be a policy discussion has now become a structural redesign problem. According to the OECD (2025), over 75 countries have…
13 views
Daily Writeups
⤷ Title: TombWatcher
════════════════════════
𐀪 Author: Mkirahmet
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:46:10 GMT
════════════════════════
⌗ Tags: #walkthrough #htb_walkthrough #ethical_hacking #penetration_testing
Medium
TombWatcher
🪦 TombWatcher HTB Walkthrough (Windows · Medium)
20 views
Daily Writeups
⤷ Title: Puppy — Windows · Medium
════════════════════════
𐀪 Author: Mkirahmet
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:47:09 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup
Medium
Puppy — Windows · Medium
Target: 10.10.11.70 (PUPPY.HTB)  Starting credentials: levi.james / KingofAkron2025! (provided)
21 views
Daily Writeups
⤷ Title: ️ HackTheBox — Previous (Linux, Medium)
════════════════════════
𐀪 Author: Mkirahmet
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:46:48 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #hackthebox_walkthrough
Medium
🕵️ HackTheBox — Previous (Linux, Medium)
Target IP Address: 10.10.11.83
24 views
Daily Writeups
⤷ Title: The RCE in PcVue! CVE-2025–9999 analysis.
════════════════════════
𐀪 Author: Burak
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 19:09:33 GMT
════════════════════════
⌗ Tags: #rce_vulnerability
Medium
The RCE in PcVue! CVE-2025–9999 analysis.
Today we will look at a very basic but high impact vulnerability.
35 views
Daily Writeups
⤷ Title: Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
════════════════════════
𐀪 Author: Pratik Dahal
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:44:43 GMT
════════════════════════
⌗ Tags: #http_request #web_application_security #security_research #bug_bounty #middleware
Medium
Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
Introduction
34 views
Daily Writeups
⤷ Title: Hacking APIs: Cache Poisoning and Deception Attacks
════════════════════════
𐀪 Author: Israel Aráoz Severiche
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:20:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #rest_api #pentesting #cybersecurity #hacking
Medium
Hacking APIs: Cache Poisoning and Deception Attacks
Cache poisoning and deception attacks represent a sophisticated threat vector that can turn performance optimization features into serious…
27 views
Daily Writeups
⤷ Title: What Your Error Messages Are Teaching Attackers
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:52:03 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #coding #security
Medium
What Your Error Messages Are Teaching Attackers
You think nobody’s listening. They are. And they’re taking notes.
14 views
Daily Writeups
⤷ Title: Escalating to Domain Admin via Misconfigured Certificate Templates: A Red Team Case Study (and Why…
════════════════════════
𐀪 Author: Anthony Cihan
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:38:01 GMT
════════════════════════
⌗ Tags: #red_team #adcs_attacks #penetration_testing #active_directory #hacking
Medium
Escalating to Domain Admin via Misconfigured Certificate Templates: A Red Team Case Study (and Why Enrollment Agent Was the Key)
Active Directory Certificate Services (AD CS) remains a Tier-0 attack surface. Most red teams look for ESC1 (enrollee supplies subject +…
12 views