Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:41:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #account_take_over #stored_xss #vapt #cookies
Medium
From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
Hi, let me introduce myself — I’m Kanishka Khandelwal. I’m currently working as an Associate Security Engineer, and apart from my day job…
17 views
Daily Writeups
⤷ Title: Open Redirect via redirect Parameter on Signup&Sign in Endpoint
════════════════════════
𐀪 Author: rozzen
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:06:52 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty
Medium
Open Redirect via redirect Parameter on Signup&Sign in Endpoint
I found a small but interesting issue on one of your assets — specifically on komunitas.example.com.
15 views
Daily Writeups
⤷ Title: How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:04:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #mobile_security #webview_vulnerabilities #cybersecurity
Medium
How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
Lab: Mobile Hacking Lab — Exchange
Package: com.mobilehackinglab.exchange
Platform: Android API 33, arm64 (Pixel 6 AVD)
24 views
Daily Writeups
⤷ Title: Excessive Data Exposure Leading to Unauthorized Access to Paid Features
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:40:56 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #vulnerability_disclosure #cyber_security_awareness #broken_access_control #bug_bounty
Medium
Excessive Data Exposure Leading to Unauthorized Access to Paid Features
How a Single API Response Led to Full Paid Access
25 views
Daily Writeups
⤷ Title: Alert Triage Process in SOC — TryhackMe
════════════════════════
𐀪 Author: Adithya Hettiarachchi
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #learn #news #hacking #soc
Medium
Alert Triage Process in SOC — TryhackMe
An alert is one of the most important parts of cybersecurity. Security teams use alerts to find suspicious or dangerous activity in a…
11 views
Daily Writeups
⤷ Title: Obfuscation as a Lifestyle: Writing Code Like a Locked Door With No Handle
════════════════════════
𐀪 Author: Franziska "Ziska" Fink
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:01:02 GMT
════════════════════════
⌗ Tags: #hacking #coding_culture #obfuscation #cybersecurity #programming
Medium
Obfuscation as a Lifestyle: Writing Code Like a Locked Door With No Handle
Most code wants to be read.
14 views
Daily Writeups
⤷ Title: TryHackMe |Linux Threat Detection 2 Walkthrough
════════════════════════
𐀪 Author: Mar1uta
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:49:10 GMT
════════════════════════
⌗ Tags: #tryhackme #threat_intelligence #walkthrough #linux #threat_detection
Medium
TryHackMe |Linux Threat Detection 2 Walkthrough
Welcome to Linux Threat Analysis — Hack & Forget. In this hands-on room you’ll investigate how attackers move after initial access: what…
17 views
Daily Writeups
⤷ Title: Recruit | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #sql_injection #cybersecurity #ctf
Medium
Recruit | TryHackMe Write-up
Hi everyone, in this write-up I’ll go through the Recruit challenge on TryHackMe.
18 views
Daily Writeups
⤷ Title: Ethical Hacking Course in Sangam Vihar
════════════════════════
𐀪 Author: EINITIAL24
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:05:43 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking_training #ethical_hacking_tools #sangam_vihar #ethical_hacking
Medium
Ethical Hacking Course in Sangam Vihar
A Practical Career Path for South Delhi Students
46 views
Daily Writeups
⤷ Title: How I Exploited a SQL Injection Vulnerability — CTF Writeup (SQLi1)
════════════════════════
𐀪 Author: Clinton Chidera
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:14:37 GMT
════════════════════════
⌗ Tags: #web_security #programming #sql_injection #cybersecurity #ctf
Medium
How I Exploited a SQL Injection Vulnerability — CTF Writeup (SQLi1)
SQL Injection has been on the OWASP Top 10 for over a decade — and for good reason. In this writeup, I’ll walk you through how I solved a…
50 views
Daily Writeups
⤷ Title: Top Five Sales Challenges Costing MSPs Cybersecurity Revenue
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:26:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Critical cPanel Vulnerability Lets Attackers Bypass Login, Gain Root Access
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 01 May 2026 11:02:37 +0000
════════════════════════
⌗ Tags: #Security #0day #Critical #Cybersecurity #EOL #Vulnerability #WHM
Hackread
Critical cPanel Vulnerability Lets Attackers Bypass Login, Gain Root Access
A critical cPanel vulnerability lets attackers bypass login and gain root access, with active exploitation reported before patches were released.
35 views
Daily Writeups
⤷ Title: Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 12:45:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_30923 #CVE_2026_42268 #cybersecurity #Denial of Service #infosec #libmodsecurity3 #Linux Security #modsecurity #Patch Alert #waf #WAF Bypass #Web Security
Daily CyberSecurity
Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs
libmodsecurity3 faces critical 8.2 & 7.5 CVSS flaws. A simple one-line script can crash WAF worker processes. Protect your server by upgrading to v3.0.15 now.
23 views
Daily Writeups
⤷ Title: Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 12:01:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender Labs #cybersecurity #Driver Safety #financial fraud #infosec #mobile security #Parking Ticket Scam #phishing #smishing #SMS Scams #Toll Scam
Daily CyberSecurity
Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide
Bitdefender uncovers a massive smishing campaign targeting drivers with fake toll and parking fines. Over 79,000 messages sent across 12 countries.
21 views
Daily Writeups
⤷ Title: $2,150 Critical Authorization Bypass: Viewer to Admin Privilege Escalation via API
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 01 May 2026 12:59:00 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #privilege_escalation #infosec #bug_bounty
Medium
$2,150 Critical Authorization Bypass: Viewer to Admin Privilege Escalation via API
Hi Everyone! While testing a SaaS platform (let’s call it ExampleCenter), I discovered a critical Broken Access Control vulnerability that…
22 views
Daily Writeups
⤷ Title: How I Found Sensitive Data Exposure on Screenly’s API — A Bug Bounty Writeup
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Fri, 01 May 2026 12:41:01 GMT
════════════════════════
⌗ Tags: #information_disclosure #bug_bounty #web_security #bugbounty_writeup #cybersecurity
Medium
How I Found Sensitive Data Exposure on Screenly’s API — A Bug Bounty Writeup
From a random ULID in a network tab to plaintext device PINs — here’s the full story.
21 views
Daily Writeups
⤷ Title: HackSudo Thor: The Most Complete Penetration Testing Walkthrough You Will Find
════════════════════════
𐀪 Author: Angle Gray
════════════════════════
ⴵ Time: Fri, 01 May 2026 11:27:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #ctf_writeup #hacking
Medium
HackSudo Thor: The Most Complete Penetration Testing Walkthrough You Will Find
Target: HackSudo Thor (VulnHub) Difficulty: Easy to Medium Goal: Read /root/proof.txt
20 views
Daily Writeups
⤷ Title: Zero: Seeing Whats Hidden
════════════════════════
𐀪 Author: Talha Bağcı
════════════════════════
ⴵ Time: Fri, 01 May 2026 11:10:03 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #ethical_hacking #hacks
Medium
Zero: Seeing Whats Hidden
!N!Ŧ!∀L!Z€:
15 views
Daily Writeups
⤷ Title: Is Your Locked Document Really Safe?
════════════════════════
𐀪 Author: Vamsikandukuru
════════════════════════
ⴵ Time: Fri, 01 May 2026 11:18:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_security #privacy #infosec
Medium
Is Your Locked Document Really Safe?
Hi everyone, my name is Vamsi Kandukuru, a cybersecurity graduate. In this write-up, we will discuss how safe our Confidential documents…
14 views