Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: From Nobody to Admin: A Short, Practical Guide to Privilege Escalation ..
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 16:40:19 GMT
════════════════════════
⌗ Tags: #privilege_escalation #bugbounty_writeup #broken_access_control #bug_bounty_tips #cybersecurity
Medium
From Nobody to Admin: A Short, Practical Guide to Privilege Escalation ..
“Imagine you sign up as a normal user…and two minutes later you’re editing the admin’s settings without ever touching their password.”…
59 views
Daily Writeups
⤷ Title: Hacker Leaks 2.3M Wired.com Records, Claims 40M-User Condé Nast Breach
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 18:09:26 +0000
════════════════════════
⌗ Tags: #Cyber Attacks #Security #Breach Stars #Condé Nast #Cyber Attack #Cybersecurity #data breach #Privacy #Vulnerability #Wired
Hackread
Hacker Leaks 2.3M Wired.com Records, Claims 40M-User Condé Nast Breach
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
51 views
Daily Writeups
⤷ Title: CloudSek Hiring CTF Round-1(6th December 2025)
════════════════════════
𐀪 Author: Chiakiichan
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 18:52:08 GMT
════════════════════════
⌗ Tags: #application_security #ctf_walkthrough #cybersecurity #security #ctf_writeup
Medium
CloudSek Hiring CTF Round-1(6th December 2025)
CloudSEK conducted their Hiring CTF Round 1 on 6th December 2025, consisting of four challenges designed to test practical security…
49 views
Daily Writeups
⤷ Title: Inside the Hacker Toolkit: Devices That Shape Modern Cybersecurity
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 19:47:42 GMT
════════════════════════
⌗ Tags: #hacking #wireless_security #infosec #security_research
Medium
Inside the Hacker Toolkit: Devices That Shape Modern Cybersecurity
When people hear the word hacker, they often imagine a person behind a laptop typing endlessly.
 In reality, modern cybersecurity research…
42 views
Daily Writeups
⤷ Title: Hacker’ların, Pentester’ların ve Donanım Meraklılarının Kullandığı 20+ İlginç Cihaz
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 19:43:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #internet_of_things_iot #hardware_hacking #technology #cybersecurity
Medium
Hacker’ların, Pentester’ların ve Donanım Meraklılarının Kullandığı 20+ İlginç Cihaz
Siber güvenlik yalnızca yazılımdan ibaret değil. Fiziksel donanımlar, RF araçları, NFC okuyucular ve özel adaptörler; gerçek dünyadaki…
51 views
Daily Writeups
⤷ Title: How I Found a Critical RCE Flaw in a Popular JS Sandbox
════════════════════════
𐀪 Author: Codi
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 21:06:40 GMT
════════════════════════
⌗ Tags: #javascript #ai #cybersecurity #rce #bug_bounty
Medium
How I Found a Critical RCE Flaw in a Popular JS Sandbox
How exposed JavaScript source maps led to sandbox escape and remote code execution in an AI platform
40 views
Daily Writeups
⤷ Title: The Reconnaissance Masterclass: Advanced Information Gathering for Modern Cybersecurity
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 21:05:15 GMT
════════════════════════
⌗ Tags: #cyber_intelligence #reconnaissance #information_security #security_research #bug_bounty
Medium
The Reconnaissance Masterclass: Advanced Information Gathering for Modern Cybersecurity
Subtitle: From Passive Collection to Actionable Intelligence — A Professional’s Guide to Finding What Others Miss
45 views
Daily Writeups
⤷ Title: From Open Redirect to Credential Theft: A Login Flow Story
════════════════════════
𐀪 Author: SabNa
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 20:16:50 GMT
════════════════════════
⌗ Tags: #web_app_security #cybersecurity #web_app_security_testing #web_penetration_testing #bug_bounty
Medium
🎭 From Open Redirect to Credential Theft: A Login Flow Story
How a harmless-looking parameter turned login into credential theft
31 views
Daily Writeups
⤷ Title: DevSecOps in the Age of LLMs: You’re Not Secure Just Because You Have AI
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 21:35:13 GMT
════════════════════════
⌗ Tags: #ai #hacking #devsecops #devops #llm
Medium
DevSecOps in the Age of LLMs: You’re Not Secure Just Because You Have AI
There is a quiet belief spreading through engineering teams right now.
41 views
Daily Writeups
⤷ Title: Infinity Learning lab: KeyMaster — Decoding S3 Secrets — Writeup
════════════════════════
𐀪 Author: Hubert
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 19:58:22 GMT
════════════════════════
⌗ Tags: #cloud_security #ctf #ctf_writeup #hacking #cybersecurity
Medium
Infinity Learning lab: KeyMaster — Decoding S3 Secrets — Writeup
This is a description the steps I took to solve the Infinity Learning lab: KeyMaster — Decoding S3 Secrets [1]. It is classified as a…
38 views
Daily Writeups
⤷ Title: The Cost of a Bug When the Data Is Permanent
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 23:52:46 GMT
════════════════════════
⌗ Tags: #responsible_disclosure #data_privacy #cybersecurity #application_security #bug_bounty
Medium
The Cost of a Bug When the Data Is Permanent
Why security failures hit differently in high-sensitivity platforms
45 views
Daily Writeups
⤷ Title: YesWeHack Dojo 46: Ghost Whisper Challenge Solution
════════════════════════
𐀪 Author: Rawansaeed
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 23:51:36 GMT
════════════════════════
⌗ Tags: #yeswehack #penetration_testing #ctf #bug_bounty
Medium
YesWeHack Dojo 46: Ghost Whisper Challenge Solution
Description
39 views
Daily Writeups
⤷ Title: Performing CSRF Exploits over GraphQL APIs
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 22:57:35 GMT
════════════════════════
⌗ Tags: #graphql #bug_bounty #csrf_exploit #csrf_attack #graphql_csrf
Medium
Performing CSRF Exploits over GraphQL APIs
Learn how misconfigured GraphQL endpoints can be exploited using CSRF attacks.
42 views
Daily Writeups
⤷ Title: MongoBleed (CVE‑2025‑14847): A Pre‑Auth MongoDB Memory Leak You Can Hunt at Scale
════════════════════════
𐀪 Author: Black1hp
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 22:52:22 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #mongodb #cybersecurity #vulnerability_research
Medium
MongoBleed (CVE‑2025‑14847): A Pre‑Auth MongoDB Memory Leak You Can Hunt at Scale
MongoDB is everywhere: startups, enterprises, internal tools, production APIs. That ubiquity is exactly what makes CVE‑2025‑14847, commonly…
44 views
Daily Writeups
⤷ Title: Advanced WAF Rule Engine Management: The Thin Line Between Security and Usability ️️
════════════════════════
𐀪 Author: Esra Kayhan
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 22:08:11 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #security #application_security #waf
Medium
Advanced WAF Rule Engine Management: The Thin Line Between Security and Usability 🕸️🛡️
Web Application Firewalls are often perceived as “deploy it, turn it on, and you’re protected.” In reality, however, the true power of a…
38 views
Daily Writeups
⤷ Title: The Cloud Blind Spots That Keep Burning DFIR Teams
════════════════════════
𐀪 Author: Elias Gray
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 22:09:31 GMT
════════════════════════
⌗ Tags: #forensics #hacking #dfir #cloud
Medium
The Cloud Blind Spots That Keep Burning DFIR Teams
Most DFIR teams say they are “cloud-ready”.
In reality, many are still doing on-prem investigations… just inside Microsoft Azure.
28 views
Daily Writeups
⤷ Title: 2025: The Year Cybersecurity Lost the War Against Machines (And No One Noticed)
════════════════════════
𐀪 Author: Michelle G Andrade
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 22:45:56 GMT
════════════════════════
⌗ Tags: #infosec #artificial_intelligence #technology #future #cybersecurity
Medium
2025: The Year Cybersecurity Lost the War Against Machines (And No One Noticed)
Retrospective: how artificial intelligence turned digital security from a protection game into an existential arms race
30 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Startup
════════════════════════
𐀪 Author: Rootseekerx0x
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 23:42:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Walkthrough — Startup
Target: Startup (TryHackMe)
26 views
Daily Writeups
⤷ Title: TryHackMe SOC Level 1: Wireshark Traffic Analysis & HTTPS Decryption Walkthrough(Task 8–9–10–11)
════════════════════════
𐀪 Author: Eren Ergen
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 23:57:59 GMT
════════════════════════
⌗ Tags: #wireshark #cybersecurity #tryhackme
38 views
Daily Writeups
⤷ Title: Advent of Cyber — Day 2: Phishing — Merry Christmas
════════════════════════
𐀪 Author: Samuel Mikeng Mbongo
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 23:38:51 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #cybersecurity #tryhackme
Medium
Advent of Cyber — Day 2: Phishing — Merry Christmas
After uncovering signs of compromise on tbfc-web01, attention shifted from servers to people.
37 views