Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Advent of Cyber 2025 - Day 17: CyberChef - Hoperation Save McSkidy
════════════════════════
𐀪 Author: Akshat Patel
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 17:27:12 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme_walkthrough #tryhackme #password_management #passwords
Medium
Advent of Cyber 2025 - Day 17: CyberChef & Hoperation Save McSkidy
I’ve always thought CyberChef had one of the coolest nicknames in security: the Cyber Swiss Army Knife. Day 17 of Advent of Cyber 2025…
11 views
Daily Writeups
⤷ Title: API Keys, Tokens, and Secrets: How They Leak and How Developers Can Avoid It
════════════════════════
𐀪 Author: Anishamudani
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 21:38:20 GMT
════════════════════════
⌗ Tags: #api_token #api_security #config_json #token_mismanagement
Medium
API Keys, Tokens, and Secrets: How They Leak and How Developers Can Avoid It
Welcome back to NINI’S SIMPLE GUIDE TO API SECURITY.
24 views
Daily Writeups
⤷ Title: How I Performed Basic API Security Tests Using
Postman (Beginner Edition)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 20:37:05 GMT
════════════════════════
⌗ Tags: #api_security_testing #postman #authentication #api_pentesting #api_security
Medium
How I Performed Basic API Security Tests Using
Postman (Beginner Edition)
In this article, I’ll be trying some security checks on the Vulnerable Application in Postman.
33 views
Daily Writeups
⤷ Title: Sharing my SSRF (Server-Side Request Forgery) blog
════════════════════════
𐀪 Author: Priyesh Pahade
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 20:53:49 GMT
════════════════════════
⌗ Tags: #ssrf_bug #ssrf #web_application_security #ssrf_attack #ssrf_vulnerability
Medium
🚀 Sharing my SSRF (Server-Side Request Forgery) blog
I’ve been working on understanding SSRF deeply — not just finding it, but understanding why it’s dangerous, how it leads to real impact…
40 views
Daily Writeups
⤷ Title: The Cybersecurity Side of AI Crypto Bots: What Users Need to Know
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:19:27 +0000
════════════════════════
⌗ Tags: #Cryptocurrency #AI #Artificial Intelligence #Crypto #Cryptocurency #Cybersecurity #Technology
Hackread
The Cybersecurity Side of AI Crypto Bots: What Users Need to Know
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
30 views
Daily Writeups
⤷ Title: Business Logic Bugs That Paid Big: How “Working as Intended” Broke Million-Dollar Systems
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:40:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #osint #cybersecurity_writeups
Medium
Business Logic Bugs That Paid Big: How “Working as Intended” Broke Million-Dollar Systems 🧠💰
After years in bug bounty, here’s something most beginners don’t realize:
19 views
Daily Writeups
⤷ Title: $2,500 Bounty: How a Simple Race Condition Let Me Get Paid Multiple Times by HackerOne
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:40:31 GMT
════════════════════════
⌗ Tags: #technology #penetration_testing #cybersecurity #tech #bug_bounty
Medium
$2,500 Bounty: How a Simple Race Condition Let Me Get Paid Multiple Times by HackerOne
When Clicking “Confirm Retest” Faster Than the Server Could Think Turned Into Free Money
20 views
Daily Writeups
⤷ Title: What is API Security and Why Should Everyday People Care About it?
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:46:34 GMT
════════════════════════
⌗ Tags: #application #api_security #application_security #api
Medium
What is API Security and Why Should Everyday People Care About it?
Ever wondered what really happens behind the scenes when you tap “Sign in with Google” and, in seconds, the app knows who you are, without…
8 views
Daily Writeups
⤷ Title: Lab: 2FA broken logic
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:23:05 GMT
════════════════════════
⌗ Tags: #pentesting #ctf #hacking #medium #ctf_writeup
Medium
Lab: 2FA broken logic
Bu lab’da, iki faktörlü kimlik doğrulama (2FA) mekanizmasının hatalı bir mantıkla uygulanması nedeniyle nasıl bypass edilebildiğini…
11 views
Daily Writeups
⤷ Title: SNORT WALKTHROUGH (TRY HACK ME )
════════════════════════
𐀪 Author: The Commoness
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:42:31 GMT
════════════════════════
⌗ Tags: #incident_response #tryhackme_walkthrough #tryhackme_snort #tryhackme #tryhackme_writeup
Medium
SNORT WALKTHROUGH (TRY HACK ME )
https://tryhackme.com/room/snort
TASK-2
12 views
Daily Writeups
⤷ Title: HackTheBox — File Uploads-Whitelist Filters
════════════════════════
𐀪 Author: 415141
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:27:18 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #web_security #file_upload #hackthebox
Medium
HackTheBox — File Uploads-Whitelist Filters
This module covers whitelist filters, which only allow specific file types. It is possible to bypass with double extensions…
14 views
Daily Writeups
⤷ Title: “Script” Engellemek Yetmez: Reflected XSS Gerçeği
════════════════════════
𐀪 Author: Melih Yılmaz
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:09:33 GMT
════════════════════════
⌗ Tags: #xss_attack #web_security #cybersecurity #web_application_security #ethical_hacking
Medium
“Script” Engellemek Yetmez: Reflected XSS Gerçeği
XSS saldırıları, web uygulamalarında sıkça karşılaşılan ve temelde bir enjeksiyon zafiyeti olarak değerlendirilen güvenlik açıklarıdır. Bu…
12 views
Daily Writeups
⤷ Title: Vulnhub Deathnote: 1 Walkthrough
════════════════════════
𐀪 Author: Luke Gearty
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:06:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerable_machine #ethical_hacking #hack_to_learn #vulnhub_walkthrough
Medium
Vulnhub Deathnote: 1 Walkthrough
“Deathnote: 1” is a vulnerable machine on Vulnhub, rated as easy. This post will be a walkthrough of hacking the machine and escalating…
21 views
Daily Writeups
⤷ Title: The Invisible Glue of the Internet: What Is API Security and Why It Matters to You
════════════════════════
𐀪 Author: Ngobirifalyne
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:51:32 GMT
════════════════════════
⌗ Tags: #api_introduction #api_security #api #getting_started_with_api #api_usage
Medium
The Invisible Glue of the Internet: What Is API Security and Why It Matters to You
Imagine you are sitting in a restaurant. You are the customer, and the kitchen is the system that prepares your food. But how does the…
21 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: France Arrests 22 Year Old After Hack of Interior Ministry Systems
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:26:27 +0000
════════════════════════
⌗ Tags: #Cyber Crime #BreachForums #Cyber Attack #Cybersecurity #data breach #France #hacking #ShinyHunters
Hackread
France Arrests 22 Year Old After Hack of Interior Ministry Systems
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
22 views
Daily Writeups
⤷ Title: $5,000 Bounty: How I Hijacked Google Gemini’s UI via Python Code Execution
════════════════════════
𐀪 Author: janet zech
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:05:51 GMT
════════════════════════
⌗ Tags: #technology #ai #security #llm #bug_bounty
Medium
$5,000 Bounty: How I Hijacked Google Gemini’s UI via Python Code Execution
This exploit can be weaponized to target anyone,no user is beyond its reach.
20 views
Daily Writeups
⤷ Title: SSRF Vulnerability Tryhackme Walkthrough
════════════════════════
𐀪 Author: Mainekhacker
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:42:44 GMT
════════════════════════
⌗ Tags: #ssrf_walkthrough #tryhackme_walkthrough #cybersecurity #web_hacking #hacking
Medium
SSRF Vulnerability Tryhackme Walkthrough
SSRF is a web application security vulnerability that allows the attacker to force the server to make unauthorised requests to any local or…
17 views
Daily Writeups
⤷ Title: CTF Flow| HackingClub
════════════════════════
𐀪 Author: Henrique
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:09:06 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hacking #offensive_security #pentesting
Medium
CTF Flow | HackingClub
Máquina : Flow
19 views
Daily Writeups
⤷ Title: Testability vs. Automatability: Why Most Automation Efforts Fail Before They Begin
════════════════════════
𐀪 Author: tanvi mittal
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 01:02:38 GMT
════════════════════════
⌗ Tags: #testing #penetration_testing #software_testing #software_development #test_automation
Medium
Testability vs. Automatability: Why Most Automation Efforts Fail Before They Begin
Test automation rarely fails because teams chose the wrong tool.
 It fails much earlier often before the first test is written when…
23 views