Daily Writeups
@Daily_Writeups
4.1K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.1K subscribers
Daily Writeups
⤷ Title: How I Hacked a Live Chatbot and Earned My First $$$$ (4-Digit) Bounty
════════════════════════
𐀪 Author: Mahbubur Rahman Soraf
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:52:33 GMT
════════════════════════
⌗ Tags: #security_research #ethical_hacking #information_security #cybersecurity #bug_bounty
Medium
How I Hacked a Live Chatbot and Earned My First $$$$ (4-Digit) Bounty
Assalamu Alaikum. I’m Mahbubur Rahman Soraf, a part-time bug bounty hunter from Bangladesh.
34 views
Daily Writeups
⤷ Title: Nmap: The Foundation of Network Reconnaissance
════════════════════════
𐀪 Author: Hathical Ecker
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:33:15 GMT
════════════════════════
⌗ Tags: #reconnaissance #ethical_hacking #cybersecurity #kali_linux #linux
Medium
Nmap: The Foundation of Network Reconnaissance
Network reconnaissance is the first phase of any structured security assessment. Before testing for vulnerabilities, a practitioner must…
35 views
Daily Writeups
⤷ Title: No FA(medium): CyLab Writeup
════════════════════════
𐀪 Author: Vyom Modi
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:11:59 GMT
════════════════════════
⌗ Tags: #cylab #ctf #picoctf #cybersecurity #ethical_hacking
Medium
No FA(medium): CyLab Writeup
In this challenge, we have a website, website backend code and leaked data.
46 views
Daily Writeups
⤷ Title: Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:46:54 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Kimsuky HttpSpy Malware Campaign Exploits Networks via Deceptive Overlays
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:15:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #ENKI Research #HttpSpy #JSONPing #Kimsuky #South Korea Threats
Daily CyberSecurity
Kimsuky HttpSpy Malware Campaign Exploits Networks via Deceptive Overlays
Learn how the Kimsuky HttpSpy malware campaign leverages a novel JSONPing execution check to target South Korean networks and evade modern security.
30 views
Daily Writeups
⤷ Title: What I Learned While Testing a Ride-Sharing Application
════════════════════════
𐀪 Author: Williams K A
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:01:12 GMT
════════════════════════
⌗ Tags: #pentester #bug_bounty #ethical_hacking #bugs
Medium
What I Learned While Testing a Ride-Sharing Application
As a developer and cybersecurity enthusiast, I enjoy exploring applications not just from a user’s perspective, but also from a quality and…
18 views
Daily Writeups
⤷ Title: SpyAI Explained | Passive Reconnaissance for AI Systems
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:39:11 GMT
════════════════════════
⌗ Tags: #web_development #bug_bounty #cybersecurity #hacking #artificial_intelligence
Medium
SpyAI Explained | Passive Reconnaissance for AI Systems 🔥
Artificial Intelligence is rapidly becoming part of modern infrastructure.
125 views
Daily Writeups
⤷ Title: I Sent One Email to “Forgot Password” and the Server Doxxed the User Back
════════════════════════
𐀪 Author: Pankaj Kumar Yadav
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:27:52 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #data_science #bug_bounty
Medium
I Sent One Email to “Forgot Password” and the Server Doxxed the User Back
How a bug bounty target turned a password reset into a full identity leak — and paid me for it
22 views
Daily Writeups
⤷ Title: CSRF Protection Bypass via Method Confusion Leading to Full Account Takeover
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:39:31 GMT
════════════════════════
⌗ Tags: #security #writing_tips #bugbounty_writeup #hacking
Medium
CSRF Protection Bypass via Method Confusion Leading to Full Account Takeover
The TV login sync feature on tvs.redacted.com allows an attacker to fully take over any redacted user account. By converting a POST request…
19 views
Daily Writeups
⤷ Title: Investigation Breakdown — Part 3
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:50:37 GMT
════════════════════════
⌗ Tags: #security #hacking #cybersecurity #true_crime #information_security
Medium
🚨 Investigation Breakdown — Part 3
Anatomy Of A Fake Technical Support Scam
19 views
Daily Writeups
⤷ Title: Exploitation Basics — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:14:59 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #cyber_security_awareness #web_development
Medium
Exploitation Basics — part 1
Moniker Link (CVE-2024–21413)
18 views
Daily Writeups
⤷ Title: The Payload That Bypassed the Filter
════════════════════════
𐀪 Author: EL_Cazad0r
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:54:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty_tips #penetration_testing #bug_bounty
Medium
The Payload That Bypassed the Filter
The payload I used during testing was:
17 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection UNION attack, determining the number of columns returned…
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:37:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf_writeup #portswigger #sql_injection #ctf
Medium
Panduan Lab Portwigger (Lab: SQL injection UNION attack, determining the number of columns returned…
Lab ini kita menentukan jumlah kolom yang dikembalikan oleh kueri asli aplikasi pada fitur filter kategori produk. Lab akan dianggap…
23 views
Daily Writeups
⤷ Title: Dive Into Pentesting:Jr Penetration Tester
════════════════════════
𐀪 Author: Cypher
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:30:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
Dive Into Pentesting:Jr Penetration Tester
Learn the basics of penetration testing, from methodology to responsible practice
28 views
Daily Writeups
⤷ Title: Cryptography Concepts — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:20:25 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme #tryhackme_pre_security #cryptography
Medium
Cryptography Concepts — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Cryptography Concepts
Room URL: https://tryhackme.com/room/cryptographyconcepts
Difficulty: Medium
Please attempt…
39 views
Daily Writeups
⤷ Title: Frostbyte CTF writeup: chaining LDAP injection, password reuse, second-order SQLi to RCE
════════════════════════
𐀪 Author: Razzle Mouse
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:11:43 GMT
════════════════════════
⌗ Tags: #ldapinjection #secondordersqli #ctf_writeup #rce
Medium
Frostbyte CTF writeup: chaining LDAP injection, password reuse, second-order SQLi to RCE
Platform: WebverseLabs CTF
37 views
Daily Writeups
⤷ Title: Sicoob SDK Banking Malware Exploits NuGet Developer Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:12:31 +0000
════════════════════════
⌗ Tags: #Malware #Financial Cybercrime #NuGet Malware #Sicoob.Sdk #Socket Security #supply chain attack
Daily CyberSecurity
Sicoob SDK Banking Malware Exploits NuGet Developer Channels
A dangerous Sicoob SDK banking malware campaign triggers a major NuGet supply chain attack. Learn how it exfiltrates private financial certificates.
30 views
Daily Writeups
⤷ Title: Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:54:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9082 #Drupal Core #PostgreSQL Superuser #Remote Code Execution #sql injection #threat analysis
Daily CyberSecurity
Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
A critical Drupal SQL injection exploit is active in the wild. Read the analysis of this flaw now that the wild exploit PoC is fully public.
31 views
Daily Writeups
⤷ Title: The Massive Gentlemen Ransomware Threat Sweeping Global Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:11:45 +0000
════════════════════════
⌗ Tags: #Malware #Double Extortion #Malware Analysis #Ransomware_as_a_Service #Storm_2697 #XChaCha20
Daily CyberSecurity
The Massive Gentlemen Ransomware Threat Sweeping Global Networks
A deep Gentlemen ransomware threat analysis by Microsoft Threat Intelligence reveals an aggressive worm capability and double extortion tactics.
21 views
Daily Writeups
⤷ Title: From a Single Parameter to Persistent Admin Access: A Privilege Escalation Rooted in Business Logic
════════════════════════
𐀪 Author: Vivekbhatt Sec
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:38:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #web_security #ethical_hacking #bug_bounty
Medium
From a Single Parameter to Persistent Admin Access: A Privilege Escalation Rooted in Business Logic
TL;DR
24 views