Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: SQL Injection: Time-Based Blind Detection Payload
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:20:12 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #sql_injection #bug_bounty_writeup #blind_sql_injection
Medium
SQL Injection: Time-Based Blind Detection Payload
Time-based blind SQL injection is one of the most reliable techniques when no data is reflected in the response. Instead of seeing output…
42 views
Daily Writeups
⤷ Title: ipspoof: An Open Source Tool for Automated Testing of HTTP Header-Based Access Controls
════════════════════════
𐀪 Author: Exript
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:09:01 GMT
════════════════════════
⌗ Tags: #pentesting #web_security #bug_bounty #cybersecurity #open_source
Medium
ipspoof: An Open Source Tool for Automated Testing of HTTP Header-Based Access Controls
Discover a commonly overlooked vulnerability class in seconds during pentests and bug bounties
19 views
Daily Writeups
⤷ Title: Google Dorking for Bug Hunters: Real-World Case Studies
════════════════════════
𐀪 Author: default
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:06:37 GMT
════════════════════════
⌗ Tags: #pentesting #red_teaming #google_dork #bug_bounty #reconnaissance
Medium
Google Dorking for Bug Hunters: Real-World Case Studies
In this writeup, I will not teach you how to write Google Dorks. There are already plenty of resources that explain Google search operators…
19 views
Daily Writeups
⤷ Title: What you do right and wrong when using AI to write an article.
════════════════════════
𐀪 Author: Th3 4rt 0f H4ck1ng
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:01:01 GMT
════════════════════════
⌗ Tags: #llm #opsec #hacker #bug_bounty #ai
Medium
What you do right and wrong when using AI to write an article.
This article was translated and proofread by an AI — but not conceived or written by one. That’s the fundamental difference.
16 views
Daily Writeups
⤷ Title: Bug bounty platforms in 2026: HackerOne, Bugcrowd, YesWeHack, Intigriti, Immunefi, Cantina…
════════════════════════
𐀪 Author: Nyko
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:54:07 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #hacking #web3
Medium
Bug bounty platforms in 2026: HackerOne, Bugcrowd, YesWeHack, Intigriti, Immunefi, Cantina, Sherlock, HackenProof, and the rest
First this is the link for non member …
19 views
Daily Writeups
⤷ Title: Critical Account Takeover via JWT Public Key Injection (JKU Hijacking) & Algoritmo Null Alignment
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:51:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #hacking #security #bug_bounty
Medium
Critical Account Takeover via JWT Public Key Injection (JKU Hijacking) & Algoritmo Null Alignment
A deep dive into broken cryptographic verification in custom OAuth/OIDC JWT middleware.
21 views
Daily Writeups
⤷ Title: Claude AI: A Practical Guide for Bug Hunters
════════════════════════
𐀪 Author: Monika
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:29:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #claude_ai #cybersecurity #ai #bug_bounty_tips
Medium
Claude AI: A Practical Guide for Bug Hunters
What Claude AI is, how to use it, and why it has become one of my favorite AI tools for learning cybersecurity, bug bounty, and everyday…
19 views
Daily Writeups
⤷ Title: Chaining API Bugs: How Low-Severity Findings Become Critical
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:29:39 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #medium #cybersecurity #writing
Medium
Chaining API Bugs: How Low-Severity Findings Become Critical
API Vulnerability Hunter, Part 5 of 5 (Series Finale)
15 views
Daily Writeups
⤷ Title: BOLA Explained: How I Accessed Another User’s Data by Changing One Number
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:28:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #medium #writing
Medium
BOLA Explained: How I Accessed Another User’s Data by Changing One Number
API Vulnerability Hunter — Part 2 of 5
20 views
Daily Writeups
⤷ Title: AI Legion Explained | Open-Source AI-Powered Network Penetration Testing
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:09:48 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #web_development #cybersecurity #hacking
Medium
🔥 AI Legion Explained | Open-Source AI-Powered Network Penetration Testing
What if your penetration-testing workflow could do more than simply launch Nmap, collect results, and leave you with hundreds of ports to…
16 views
Daily Writeups
⤷ Title: Case Study: Verifying Security Fixes Instead of Trusting Them
════════════════════════
𐀪 Author: David Baxter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:08:58 GMT
════════════════════════
⌗ Tags: #software_engineering #devsecops #application_security #cybersecurity #penetration_testing
Medium
Case Study: Verifying Security Fixes Instead of Trusting Them
A CyBax Solutions engagement summary
16 views
Daily Writeups
⤷ Title: Omarchy Can Do WHAT? 20+ Features You Are Missing
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:29:09 GMT
════════════════════════
⌗ Tags: #technology #tech #cybersecurity #operating_systems #infosec
Medium
Omarchy Can Do WHAT? 20+ Features You Are Missing
You Installed it Stared at a Blank Tiling Desktop and Wondered what now here’s everything you missed explained Properly
20 views
Daily Writeups
⤷ Title: The Linux sort Command Is Not for Alphabetizing: A SOC Analyst’s Guide to Log Triage
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:13:28 GMT
════════════════════════
⌗ Tags: #infosec #threat_hunting #sysadmin #cybersecurity #linux
Medium
The Linux sort Command Is Not for Alphabetizing: A SOC Analyst’s Guide to Log Triage
Most Linux tutorials teach the sort command with a grocery list. Then a real incident hands you tens of thousands of auth log lines and one…
23 views
Daily Writeups
⤷ Title: GLITCH — TryHackMe Walkthrough
════════════════════════
𐀪 Author: M Umer Saqib
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:27:10 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf_writeup #tryhackme #web_penetration_testing #cybersecurity
Medium
GLITCH — TryHackMe Walkthrough
Web Exploitation, Credential Extraction & Privilege Escalation
23 views
Daily Writeups
⤷ Title: Privilege Escalation: How to Make Yourself an Admin
════════════════════════
𐀪 Author: Osama Bauomi
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:53:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #privilege_escalation #business_logic #penetration_testing #bug_bounty
Medium
Privilege Escalation: How to Make Yourself an Admin
Hello Hunters! 👋
31 views
Daily Writeups
⤷ Title: I Smuggled Data Through DNS Queries
════════════════════════
𐀪 Author: Orion-Root
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 18:38:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #cybersecurity
Medium
I Smuggled Data Through DNS Queries
What if an attacker didn’t need HTTP, FTP, or a file upload to move sensitive data out of a system?
34 views
Daily Writeups
⤷ Title: Shared Libraries Are Not Enough: Making Authorization Secure by Default
════════════════════════
𐀪 Author: Kovid
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 19:04:59 GMT
════════════════════════
⌗ Tags: #api_security #software_architecture #software_engineering #engineering_leadership #distributed_systems
Medium
Shared Libraries Are Not Enough: Making Authorization Secure by Default
In my last article, I wrote about a simple but important distinction: authentication tells us who you are; authorization determines what…
38 views
Daily Writeups
⤷ Title: I Read The Policies So You Don’t Have To; Bugcrowd (Vulnerability Reporting Platform)
════════════════════════
𐀪 Author: Its Not Nicole
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 20:48:50 GMT
════════════════════════
⌗ Tags: #bugcrowd #bug_bounty #data #data_analysis #privacy
Medium
I Read The Policies So You Don’t Have To; Bugcrowd (Vulnerability Reporting Platform)
A privately owned company formed in 2012, Bugcrowd don’t post their financial information publicly, and any estimates for annual recurring…
27 views
Daily Writeups
⤷ Title: Four Spy Groups Used the Same Chrome Exploit Kit in One Week. Here’s How BlueMoon Works.
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 20:54:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #security_research #penetration_testing #hacking
Medium
Four Spy Groups Used the Same Chrome Exploit Kit in One Week. Here’s How BlueMoon Works.
Breaking Down the BlueMoon Attack Chain
18 views
Daily Writeups
⤷ Title: My Cybersecurity Internship Journey at Nexzer
════════════════════════
𐀪 Author: Adedokunfreedom
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 21:08:46 GMT
════════════════════════
⌗ Tags: #internships #tech #cybersecurity #infosec #appsec
Medium
My Cybersecurity Internship Journey at Nexzer
I started my internship at Nexzer, a cybersecurity company. With the few weeks I’ve spent there as an intern, I’ve learnt a lot about…
23 views