Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How One Tiny IDOR Created a Digital Domino Effect That Toppled Their Entire Security
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 23 Nov 2025 08:22:38 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty_tips #hacking #bug_bounty
Medium
How One Tiny IDOR Created a Digital Domino Effect That Toppled Their Entire Security 🎲
Free link 🎈
13 views
Daily Writeups
⤷ Title: How I Found a Critical IDOR in a University System (and Why Ethical Hacking Matters)
════════════════════════
𐀪 Author: j4k3l0ng
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 22:02:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #idor #api #cybersecurity #bug_bounty
Medium
How I Found a Critical IDOR in a University System (and Why Ethical Hacking Matters)
“Security isn’t about breaking systems. It’s about protecting people.”
21 views
Daily Writeups
⤷ Title: Low-level logic flaw — PortSwigger Academy
════════════════════════
𐀪 Author: Fatimahasan
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 19:10:28 GMT
════════════════════════
⌗ Tags: #web_applications #security #oscp #pentesting #bug_bounty
Medium
Business Logic Vulnerabilities — Hands-On Lab Series (PortSwigger Academy)
Lab Explanation
23 views
Daily Writeups
⤷ Title: Your Blue Team is Incomplete Without Dark Web Monitoring — How I Found a Bug in Criminal Chatter…
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 17:55:22 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #cybersecurity #hacking #darkweb
Medium
Your Blue Team is Incomplete Without Dark Web Monitoring — How I Found a Bug in Criminal Chatter 🚨💻
Hey there!😁
16 views
Daily Writeups
⤷ Title: From Dorks to Defense: How I Secured Two CERT-In Hall of Fames
════════════════════════
𐀪 Author: Het Patel
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 17:48:54 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bugs #sql_injection #hall_of_fame
Medium
From Dorks to Defense: How I Secured Two CERT-In Hall of Fames
A recon-first approach that uncovered XSS, SQLi, and two CERT-In Hall of Fame mentions.
19 views
Daily Writeups
⤷ Title: The New King of Vulnerabilities: Why Broken Access Control is the #1 Threat to Your App
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 17:46:57 GMT
════════════════════════
⌗ Tags: #vulnerability #abc #bug_bounty #broken_access_control #cybersecurity
Medium
The New King of Vulnerabilities: Why Broken Access Control is the #1 Threat to Your App 👑
It affects 94% of applications. It has over 318,000 recorded occurrences. And it might be open in your code right now.
15 views
Daily Writeups
⤷ Title: Vulnerability Assessment and Exploitation: Leveraging GVM, Nmap, and RSH for Complete Host…
════════════════════════
𐀪 Author: Kiza
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 14:46:54 GMT
════════════════════════
⌗ Tags: #vulnerability_scanning #nmap #bug_bounty #ethical_hacking #web_application_security
Medium
Vulnerability Assessment and Exploitation: Leveraging GVM, Nmap, and RSH for Complete Host Compromise
Author: https://kiza.online/
13 views
Daily Writeups
⤷ Title: Exploiting an IDOR to Claim Unavailable Free Gifts
════════════════════════
𐀪 Author: Parth Narula
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 14:45:51 GMT
════════════════════════
⌗ Tags: #idor_vulnerability #vulnerability #broken_access_control #bug_bounty #idor
Medium
Exploiting an IDOR to Claim Unavailable Free Gifts
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…
19 views
Daily Writeups
⤷ Title: My First Two Bounties
════════════════════════
𐀪 Author: Khaledelnabet
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 14:43:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugs #cybersecurity #hacking #security
Medium
My First Two Bounties🔥
الحمدُ للهِ ربِّ العَالَمِينَ. اللَّهُمَّ لَكَ الحَمْدُ كَمَا يَنْبَغِي لِجَلَالِ وَجْهِكَ وَعَظِيمِ سُلْطَانِكَ. الحمْدُ للهِ عَلَى…
25 views
Daily Writeups
⤷ Title: I Automated My Entire Recon Process
════════════════════════
𐀪 Author: Ibtissam
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 13:26:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #bug_bounty #automation #infosec
Medium
I Automated My Entire Recon Process
Here’s how
18 views
Daily Writeups
⤷ Title: HOW I Got My First Bug Bounty In Few Steps– $50 AUD for an HTML Injection
════════════════════════
𐀪 Author: Sohambughunt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 11:27:46 GMT
════════════════════════
⌗ Tags: #hacker #bug_bounty_writeup #bug_hunter #bug_bounty #html_hyperlink
Medium
HOW I Got My First Bug Bounty In Few Steps– $50 AUD for an HTML Injection
For a long time, I wondered if beginners could really earn a bounty. I’d submitted valid reports to public VDPs before and never got a…
12 views
Daily Writeups
⤷ Title: Building Secure APIs from Day One
════════════════════════
𐀪 Author: Israel Aráoz Severiche
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 15:26:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #application_security #information_security #web_development
Medium
Building Secure APIs from Day One
In today’s fast-paced digital landscape, organizations are increasingly adopting a “shift-left” approach to API security, integrating…
10 views
Daily Writeups
⤷ Title: The 5 Node.js Input Mistakes Attackers Love — And How to Fix Them
════════════════════════
𐀪 Author: Krutik Thakar — Secure Developer | VAPT Associate
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 12:51:48 GMT
════════════════════════
⌗ Tags: #secure_development #cybersecurity #nodejs #application_security #javascript
Medium
The 5 Node.js Input Mistakes Attackers Love -And How to Fix Them
Practical patterns for preventing injection flaws, bypasses, and supply-chain risks in modern Node.js applications.
16 views
Daily Writeups
⤷ Title: Why Your Threat Models Are Gathering Dust (And How to Fix It)
════════════════════════
𐀪 Author: Kay Adelaja
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 21:38:05 GMT
════════════════════════
⌗ Tags: #software_development #application_security #software_engineering #web_development #cybersecurity
Medium
Why Your Threat Models Are Gathering Dust (And How to Fix It)
How Continuous Threat Modeling turns security from a bottleneck into a daily habit
10 views
Daily Writeups
⤷ Title: How the U.S. Cyber Defense Market Is Set to Reach USD 150.6 Billion by 2032
════════════════════════
𐀪 Author: Vijay Mishra
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 04:24:05 GMT
════════════════════════
⌗ Tags: #network_security #cyber #cyber_defense #application_security #cloud_security
Medium
How the U.S. Cyber Defense Market Is Set to Reach USD 150.6 Billion by 2032
The U.S. cyber defense market was valued at USD 65.1 billion in 2024 and is projected to grow at a CAGR of 11.2% during 2025–2032…
16 views
Daily Writeups
⤷ Title: Token-based Authentication: JWT vs. PASETO
════════════════════════
𐀪 Author: 石井
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:59:39 GMT
════════════════════════
⌗ Tags: #software_architecture #developer #software_development #application_security #cybersecurity
Medium
Token-based Authentication: JWT vs. PASETO
Few transitions have been as impactful as the migration from stateful systems to stateless systems.
14 views
Daily Writeups
⤷ Title: API Security: Why It Matters
════════════════════════
𐀪 Author: Catelle Ningha
════════════════════════
ⴵ Time: Sun, 23 Nov 2025 19:06:45 GMT
════════════════════════
⌗ Tags: #application_security #api_security #owasp_top_10 #web_development #cybersecurity
Medium
API Security: Why It Matters
APIs are the lifeblood of modern applications. They connect services, power mobile apps, and enable the digital experiences we rely on…
17 views
Daily Writeups
⤷ Title: All About Android Pentesting
════════════════════════
𐀪 Author: Xcheater
════════════════════════
ⴵ Time: Sun, 23 Nov 2025 06:53:42 GMT
════════════════════════
⌗ Tags: #android #cybersecurity #android_pentesting #android_development #application_security
Medium
All About Android Pentesting: A Complete Methodology
Complete Android application security testing guide: Static & dynamic testing, root detection bypass, SSL pinning, and common vuln…
14 views
Daily Writeups
⤷ Title: Your Firewall Can’t Save You: The Silent Crisis in API Security
════════════════════════
𐀪 Author: Chinaza Emmanuela Obidike
════════════════════════
ⴵ Time: Sun, 23 Nov 2025 00:23:25 GMT
════════════════════════
⌗ Tags: #api_security #penetration_testing #application_security #api #owasp_api_security_top_10
Medium
Your Firewall Can’t Save You: The Silent Crisis in API Security
If you think your web application is secure because you have a Firewall and HTTPS, you might be leaving the front door wide open.
15 views
Daily Writeups
⤷ Title: Gestão de identidades e acessos — para clientes e colaboradores com CIAM e WIAM
════════════════════════
𐀪 Author: 石井
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 23:04:28 GMT
════════════════════════
⌗ Tags: #identity_management #architecture #software_architecture #cybersecurity #application_security
Medium
Gestão de identidades e acessos — para clientes e colaboradores com CIAM e WIAM
A Gestão de Identidades e Acessos (IAM) tornou-se fundamental na segurança cibernética contemporânea, permitindo controlar quem acessa…
8 views
Daily Writeups
⤷ Title: The New OWASP Top 10 Is Out
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 21:40:34 GMT
════════════════════════
⌗ Tags: #owasp #application_security #ai #cybersecurity #information_security
Medium
The New OWASP Top 10 Is Out
OWASP finally released its long-awaited 2025 Top 10 — the first major update since 2021 — and this time, the message is loud and clear:
7 views