Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: Why Hackers Love thefuck: The Terminal Weapon You Didn’t Know You Needed
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:41:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #pentesting #linux
Medium
🧠 Why Hackers Love thefuck: The Terminal Weapon You Didn’t Know You Needed
One typo can ruin a scan. One missing sudo can waste 20 minutes. One forgotten flag can kill momentum.
36 views
Daily Writeups
⤷ Title: From {{7+7}} to Root: Achieving RCE via SSTI
════════════════════════
𐀪 Author: Raj Prasad Kuiri
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:10:43 GMT
════════════════════════
⌗ Tags: #security #application_security #bug_bounty #cybersecurity #information_security
Medium
From {{7+7}} to Root: Achieving RCE via SSTI
Hey everyone, in this blog, we will see how to identify RCE via SSTI using manual and automated approaches. So let's begin
30 views
Daily Writeups
⤷ Title: Joern: Your Secret Weapon for Hunting Bugs at Scale
════════════════════════
𐀪 Author: Madushka
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:00:07 GMT
════════════════════════
⌗ Tags: #application_security
Medium
Joern: Your Secret Weapon for Hunting Bugs at Scale
Let’s be honest: auditing a massive codebase for security flaws is often a nightmare. Traditional static analysis tools (SAST) are…
20 views
Daily Writeups
⤷ Title: The Day I Found an Exposed Google Cloud Service Account Key in a Production JS File — And How…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:52:25 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #bug_bounty_tips #bug_bounty #hacking_tools
Medium
🔐 The Day I Found an Exposed Google Cloud Service Account Key in a Production JS File — And How It Landed Me in Philips’ Hall of…
Bug bounty stories usually start with adrenaline, payloads, and dashboards lighting up, right?
15 views
Daily Writeups
⤷ Title: When I Found a Hardcoded Sentry Token in a JS Bundle — And Got the Classic “Already a Known…
════════════════════════
𐀪 Author: Anshubind
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:51:47 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #hackerone #bug_bounty_tips #bug_bounty
Medium
🔑 When I Found a Hardcoded Sentry Token in a JS Bundle — And Got the Classic “Already a Known Issue” Reply
If you’re in bug bounty or security research long enough, you eventually run into that reply:
12 views
Daily Writeups
⤷ Title: DC-1 → DC-9: A Full 9-Machine Pentesting Series | Episode 8: DC-9
════════════════════════
𐀪 Author: Shikhar Sinha
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:48:22 GMT
════════════════════════
⌗ Tags: #oscp #ctf #vulnhub #vulnerability #hacking
Medium
DC-1 → DC-9: A Full 9-Machine Pentesting Series | Episode 8: DC-9
[Series Link] :- https://www.vulnhub.com/series/dc,199/
8 views
Daily Writeups
⤷ Title: Padelify CTF Write-up: When WAFs play padel and lose
════════════════════════
𐀪 Author: Telynor
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:36:39 GMT
════════════════════════
⌗ Tags: #hacking #writeup #tryhackme #ctf
Medium
Padelify CTF Write-up: When WAFs play padel and lose
So there I was, ready to tackle another TryHackMe challenge. The target? A padel championship web application called “Padelify”. The…
7 views
Daily Writeups
⤷ Title: Why I Don’t Teach Hacking the “Responsible” Way
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:34:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethics #systems_thinking #digital_literacy #hacking
Medium
Why I Don’t Teach Hacking the “Responsible” Way
The Question That Never Goes Away
11 views
Daily Writeups
⤷ Title: How Hackers Use Kali Linux Against Cloud Servers
════════════════════════
𐀪 Author: Fareed Masood
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:08:33 GMT
════════════════════════
⌗ Tags: #aws #hacking #kali_linux #cloud_computing #devops
Medium
How Hackers Use Kali Linux Against Cloud Servers
And Where Most Attacks Actually Fail
20 views
Daily Writeups
⤷ Title: Cybersecurity Writing Pays More Than You Think
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:30:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #ethical_hacking #make_money_online #cybersecurity_careers
Medium
Cybersecurity Writing Pays More Than You Think
Why companies pay cybersecurity writers more
7 views
Daily Writeups
⤷ Title: Practical CSRF Protection for Cookie-Based APIs
════════════════════════
𐀪 Author: Nitish Mehta
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:13:50 GMT
════════════════════════
⌗ Tags: #csrf #cookies #api_security #infosec #cloud_security
Medium
Practical CSRF Protection for Cookie-Based APIs
API security doesn’t usually fail because of weak cryptography. It fails because browsers do exactly what they’re designed to do — and…
10 views
Daily Writeups
⤷ Title: Exploiting Logic Flaw to Bypass Payment Using Fractional Quantities
════════════════════════
𐀪 Author: Hamzadzworm
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:31:09 GMT
════════════════════════
⌗ Tags: #infosec #bugbounty_tips #bug_bounty_writeup #information_security #infosec_write_ups
Medium
Exploiting Logic Flaw to Bypass Payment Using Fractional Quantities
Hi, My name is Abdelkader Mouaz and also know as Hamzadzworm
❤1
11 views
Daily Writeups
⤷ Title: My eCPPTv3 Exam Experience — A Real Test of Manual Pentesting Skills
════════════════════════
𐀪 Author: Anand Jogawade
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:47:00 GMT
════════════════════════
⌗ Tags: #ecppt #ecpptv2 #elearnsecurity #ecpptv3 #penetration_testing
Medium
My eCPPTv3 Exam Experience — A Real Test of Manual Pentesting Skills
I recently cleared the eCPPTv3 (eLearnSecurity Certified Professional Penetration Tester) exam, and overall, it was an intense but…
21 views
Daily Writeups
⤷ Title: AI Series Ep. 5 — Your own Pentest Agent with Python and Open WebUI all local
════════════════════════
𐀪 Author: Michael Harms
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:46:56 GMT
════════════════════════
⌗ Tags: #ai_agent #penetration_testing #agentic_ai #llm #python
Medium
AI Series Ep. 5 — Your own Pentest Agent with Python and Open WebUI all local
Today I want to show you how you can add a tool to your model in Open WebUI. In this particular case I will show you the enumeration of a…
17 views
Daily Writeups
⤷ Title: Prompt Injection — Sched-yule conflict: Day 8 Advent of Cyber 2025 Tryhackme
════════════════════════
𐀪 Author: Bridget
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 15:15:24 GMT
════════════════════════
⌗ Tags: #agentic_ai #prompt_injection_attack #adventofcyber_4 #tryhackme #llm
Medium
Prompt Injection — Sched-yule conflict: Day 8 Advent of Cyber 2025 Tryhackme
Learn to identify and exploit weaknesses in autonomous AI agents.
13 views
Daily Writeups
⤷ Title: YARA Rules — YARA mean one!|Try Hack Me Walkthrough
════════════════════════
𐀪 Author: Fazal
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:58:36 GMT
════════════════════════
⌗ Tags: #security #tryhackme_walkthrough #tryhackme #tryhackme_writeup #rules
Medium
YARA Rules — YARA mean one!|Try Hack Me Walkthrough
The Story
20 views
Daily Writeups
⤷ Title: Day 12: Advent of Cyber 2025 — TryHackMe
════════════════════════
𐀪 Author: ms.chalo_cy
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #advent_of_cyber_2025 #social_engineering #tryhackme #phising
Medium
Day 12: Advent of Cyber 2025 — TryHackMe
Phishing — Phishmas Greetings
27 views
Daily Writeups
⤷ Title: WHAT IS API SECURITY AND WHY SHOULD EVERYDAY PEOPLE CARE?
════════════════════════
𐀪 Author: verytiredgirl
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 14:05:35 GMT
════════════════════════
⌗ Tags: #api #api_security #pentesting #cybersecurity
Medium
WHAT IS API SECURITY AND WHY SHOULD EVERYDAY PEOPLE CARE?
The use of APIs in our everyday activities cannot be overemphasized. For every time you check the weather on your phone, order food through…
31 views
Daily Writeups
⤷ Title: Understanding Server-Side Request Forgery (SSRF): What It Is, How It Happens, and How to Prevent It
════════════════════════
𐀪 Author: Anishamudani
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 03:37:55 GMT
════════════════════════
⌗ Tags: #ssrf_walkthrough #api_security #api_walkthough #api
Medium
Understanding Server-Side Request Forgery (SSRF): What It Is, How It Happens, and How to Prevent It
Welcome back to NINI’S SIMPLE GUIDE TO API SECURITY where we break down complex security concepts into something you can actually…
38 views
Daily Writeups
⤷ Title: Notepad++ 8.8.9 Update Released With Important Security Fix
════════════════════════
𐀪 Author: Cyber security updates
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 16:54:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #data_breach #technology #exploit
Medium
Notepad++ 8.8.9 Update Released With Important Security Fix
full story in blog
29 views