Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Master Directory Brute-Forcing: A Guide to Using ffuf
════════════════════════
𐀪 Author: Aditya InfosecTrain
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 06:04:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #content_discovery #ffuf #web_vulnerabilities
Medium
Master Directory Brute-Forcing: A Guide to Using ffuf
Finding hidden directories and files is a fundamental step in any security assessment, and ffuf (Fuzz Faster U Fool) has quickly become the…
30 views
Daily Writeups
⤷ Title: Critical Craft CMS Flaw Grants Instant Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 08:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anthropic #Content Management System #Craft CMS #CVE_2026_32267 #cybersecurity #infosec #Patch Alert #privilege escalation #Web Security
Daily CyberSecurity
Critical Craft CMS Flaw Grants Instant Admin Access
In the world of web development, the “Live Preview” button is a staple for content editors—a harmless way to see how an article looks before it goes live. However, a newly discovered v…
19 views
Daily Writeups
⤷ Title: An Open Door for Attackers. Lock It with CSP.
════════════════════════
𐀪 Author: Asrarul Hoque Eusha
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 13:09:06 GMT
════════════════════════
⌗ Tags: #content_security_policy #xss_vulnerability #web_security #clickjacking
Medium
An Open Door for Attackers. Lock It with CSP.
A complete guide to Content Security Policy — from your first header to a production-hardened, violation-reporting policy.
4 views
Daily Writeups
⤷ Title: Junior Pentester labs of try hack me; main content
════════════════════════
𐀪 Author: Abdulnafayk
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 12:49:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #content_discovery #tryhackme #reconnaissance
Medium
Junior Pentester labs of try hack me; main content
What is sitemap.xml?
14 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:56:25 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
15 views
Daily Writeups
⤷ Title: CSP bypass and Dangling Markup Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:58:15 GMT
════════════════════════
⌗ Tags: #xss_attack #css #xs #content_security_policy #cross_site_scripting
Medium
CSP bypass and Dangling Markup Xss
🧠 What is CSP?
20 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 06:02:19 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
18 views
Daily Writeups
⤷ Title: Content Security Policy | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Wed, 06 May 2026 09:46:57 GMT
════════════════════════
⌗ Tags: #content_security_policy #tryhackme #xs #cybersecurity #vulnerability
Medium
Content Security Policy | TryHackMe
In this room you’ll learn what CSP is, what it’s used for and how to recognize vulnerabilities in a CSP header.
17 views
Daily Writeups
⤷ Title: Reddit in the Spotlight: Google’s Search Pivot Puts “First-Hand Accounts” at the Core of AI Overviews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:04:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews #content licensing #Digital Marketing 2026 #Expert Advice #First_Hand Accounts #Google AI Mode #google search #Reddit #Search Engine Updates #SEO Strategy #Zero_Click Search
Daily CyberSecurity
Reddit in the Spotlight: Google’s Search Pivot Puts "First-Hand Accounts" at the Core of AI Overviews
Google’s AI Overviews shift focus to first-hand accounts from Reddit and social media. Discover how "Expert Advice" and inline linking aim to reclaim user trust.
16 views
Daily Writeups
⤷ Title: The Slop Line
════════════════════════
𐀪 Author: Suman Reddy
════════════════════════
ⴵ Time: Wed, 13 May 2026 17:46:15 GMT
════════════════════════
⌗ Tags: #gpt #content #ai_slop #xs
Medium
The Slop Line
What a viral Gen Z GPT taught me about AI content, emotional resonance, and the difference between sounding right and actually landing.
26 views