Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Over 70 Domains Used in Months-Long Phishing Spree Against US Universities
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 11:15:58 +0000
════════════════════════
⌗ Tags: #Phishing Scam #Scams and Fraud #Security #Cyber Attack #Cybersecurity #Evilginx #Fraud #Phishing #Phishing Kit #Scam #University #USA
Hackread
Over 70 Domains Used in Months-Long Phishing Spree Against US Universities
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
17 views
Daily Writeups
⤷ Title: CVE-2025-55182: A Pre-Authentication RCE in Next.js - Complete Guide
════════════════════════
𐀪 Author: PARADOX
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 16:06:14 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #javascript #cybersecurity #penetration_testing
Medium
CVE-2025-55182: A Pre-Authentication RCE in Next.js - Complete Guide
Hey there, back again with another post! 😄
16 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:37:45 GMT
════════════════════════
⌗ Tags: #jwt_authentication_bypass #jwt_token #bug_bounty #bug_bounty_tips #jwt_algorithm_confusion
Medium
JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
How weak JWT algorithm handling exposes admin-level access without leaking a private key.
16 views
Daily Writeups
⤷ Title: ️ I Discovered a Parameter Pollution Vulnerability in a Payment QR System
════════════════════════
𐀪 Author: Nimit Ahir
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:37:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #bug_bounty #parameter_tempering
Medium
🛡️ I Discovered a Parameter Pollution Vulnerability in a Payment QR System
BY NIMIT AHIR | “🚨 I Can Buy Anything for ₹5 by Exploiting a Payment QR Vulnerability ⚠️💸” | LinkedIn
15 views
Daily Writeups
⤷ Title: What a Honeypot Taught Me About Real-World Deception in Cybersecurity
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:26:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #deception #highlights #bug_bounty #honeypot
Medium
What a Honeypot Taught Me About Real-World Deception in Cybersecurity
Most people think cybersecurity is about breaking things — finding bugs, crashing systems, getting a shell. It’s the highlight reel. But…
11 views
Daily Writeups
⤷ Title: ️‍♂️ My Complete Recon Workflow for Bug Bounty Hunting (2025 Edition)
════════════════════════
𐀪 Author: Purushotham.R
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:22:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #reconnaissance #osint #bug_bounty
Medium
🕵️‍♂️ My Complete Recon Workflow for Bug Bounty Hunting (2025 Edition)
If you want to find real bugs, you have to start with real recon.
14 views
Daily Writeups
⤷ Title: Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
════════════════════════
𐀪 Author: MaMad
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 12:26:04 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty_tips #bug_bounty #burp
Medium
Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
When testing applications with Burp Suite, it’s easy to get overwhelmed by noisy traffic: analytics scripts, ads, assets, and external APIs…
27 views
Daily Writeups
⤷ Title: CVE-2025–55182: A Practical Breakdown for Security, Engineering, and Product Teams
════════════════════════
𐀪 Author: Enrique Somoza
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:00:42 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #security_architecture #reactjs #application_security
Medium
CVE-2025–55182: A Practical Breakdown for Security, Engineering, and Product Teams
CVE-2025–55182 exposes a subtle React flaw that turns UI state into an attack surface. Here’s what to know.
18 views
Daily Writeups
⤷ Title: Stop Leaving Your Linux Server Open to Hackers: A Practical Security Guide
════════════════════════
𐀪 Author: Ashish Singh
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:22:03 GMT
════════════════════════
⌗ Tags: #linux #hacking #security #devops #open_source
Medium
Stop Leaving Your Linux Server Open to Hackers: A Practical Security Guide
Security should start before the attack — not after.
21 views
Daily Writeups
⤷ Title: Demystifying Security Operations Center (SOC) — A Beginner’s Guide
════════════════════════
𐀪 Author: Binesh Madharapu
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:01:21 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #blue_team #hacking #education
Medium
Demystifying Security Operations Center (SOC) — A Beginner’s Guide
Introduction:
23 views
Daily Writeups
⤷ Title: The Invisible Eye: How the New ‘Predator’ Spyware Turns Mobile Ads Into Surveillance Weapons
════════════════════════
𐀪 Author: Enes Karataş
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:51:16 GMT
════════════════════════
⌗ Tags: #hackad #zero_click_attack #aladdin #intellexa #hacking
Medium
The Invisible Eye: How the New ‘Predator’ Spyware Turns Mobile Ads Into Surveillance Weapons
You didn’t click anything, but the hack has already begun. Inside the new ‘Aladdin’ exploit that turns the ads on your screen into…
10 views
Daily Writeups
⤷ Title: Implementing Communication Encryption in Tor C2 — Part 7
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:29:41 GMT
════════════════════════
⌗ Tags: #pentesting #malware #hacker #hacking #cybersecurity
Medium
Implementing Communication Encryption in Tor C2 — Part 7
Welcome to this new Medium post, in this one I will show you my AES implementation to encrypt all the communications between the…
19 views
Daily Writeups
⤷ Title: Avoid Leaking Secrets In Your Code
════════════════════════
𐀪 Author: Til Schwarze
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:18:39 GMT
════════════════════════
⌗ Tags: #secrets #information_security #credentials #python #hacking
Medium
Avoid Leaking Secrets In Your Code
With many new faces in the coding communtiy, one problem has been appearing more and more. Developers hard-code their secrets (API-Keys…
8 views
Daily Writeups
⤷ Title: One object to create and carry to thwart all Archon attacks
════════════════════════
𐀪 Author: David Senouf
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:03:54 GMT
════════════════════════
⌗ Tags: #hacking #archons #gnosticism #matrix
Medium
One object to create and carry to thwart all Archon attacks
In the Gospel of Philip, it is inferred that a single object that provides complete protection from all “archon attacks”.
9 views
Daily Writeups
⤷ Title: How to Use a Flipper Zero: A Step-by-Step Visual Guide for Beginners
════════════════════════
𐀪 Author: Ibtissam
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 13:35:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking #flipper_zero #technology
Medium
How to Use a Flipper Zero: A Step-by-Step Visual Guide for Beginners
The box is sleek. The device feels surprisingly solid in your hand. You power on your new Flipper Zero and… are greeted by a dolphin. Now…
11 views
Daily Writeups
⤷ Title: React2Shell and the Broader Lessons of a Vulnerability at the Framework Layer
════════════════════════
𐀪 Author: CryptoCadet
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 13:02:37 GMT
════════════════════════
⌗ Tags: #react #hacking #cybersecurity #web_development #nextjs
Medium
React2Shell and the Broader Lessons of a Vulnerability at the Framework Layer
The recent disclosure of CVE-2025–55182, now widely referred to as React2Shell, represents one of the most consequential security events in…
13 views
Daily Writeups
⤷ Title: Writeup for picoCTF challenge “Scavenger Hunt”
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 12:02:31 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #hacking #picoctf
Medium
Writeup for picoCTF challenge “Scavenger Hunt”
Hunt through robots.txt, .htaccess, and .DS_Store files to understand forced browsing attacks
16 views
Daily Writeups
⤷ Title: Mastering Security Hardening in Production Environments
════════════════════════
𐀪 Author: Linux Guide
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:05:22 GMT
════════════════════════
⌗ Tags: #security #prod #defense #harden #infosec
Medium
Mastering Security Hardening in Production Environments
Achieving resilience and ensuring data integrity within modern cloud infrastructure demands a shift from reactive security measures to a…
14 views
Daily Writeups
⤷ Title: Proof of LIfe in a Dead Internet
════════════════════════
𐀪 Author: Jeremy Tarkington
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 13:32:17 GMT
════════════════════════
⌗ Tags: #osint #dead_internet_theory #bot_traffic #homelab #infosec
Medium
Proof of LIfe in a Dead Internet
If you work in security, you spend your time in things that are very obviously real: users forgetting passwords, weird processes on a box…
9 views
Daily Writeups
⤷ Title: #12- Kali Linux - Collection T: Harvesting Data from Compromised Systems
════════════════════════
𐀪 Author: SDNTechForum
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 13:02:42 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #kali_linux #pentesting #red_team
Medium
#12- Kali Linux - Collection Tools: Harvesting Data from Compromised Systems
With network access systematically expanded through Lateral Movement, the next critical phase becomes extracting the valuable data that…
20 views