Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Mastery Hunt: Hidden API Endpoints — A Deep Dive into API Bug Bounty Recon & Exploitation
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 07:04:50 GMT
════════════════════════
⌗ Tags: #apihacking #api_security #apirecon #apihunting #api_security_testing
Medium
Mastery Hunt: Hidden API Endpoints — A Deep Dive into API Bug Bounty Recon & Exploitation
API security testing is the crown jewel of modern bug bounty hunting. While front-end vulnerabilities still exist, APIs are where the real…
42 views
Daily Writeups
⤷ Title: How a Public Token Led to Unauthenticated Read and Write Access on an IoT Platform
════════════════════════
𐀪 Author: Ahmad Faraz
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 08:57:28 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #bug_hunting #claude_code
Medium
How a Public Token Led to Unauthenticated Read and Write Access on an IoT Platform
Summary
41 views
Daily Writeups
⤷ Title: How a BOLA Vulnerability Escalated Into Full Account Takeover
════════════════════════
𐀪 Author: Rafly Ramadhan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 07:59:20 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #vulnerability #idor
Medium
How a BOLA Vulnerability Escalated Into Full Account Takeover
An anonymized case study on how weak object level authorization, open registration, and an unsafe email change flow created a critical…
30 views
Daily Writeups
⤷ Title: How SQL Injection Lets Attackers Steal Data: A Hands-On Guide to Blind and Error-Based SQLi
════════════════════════
𐀪 Author: TheNotorious
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 09:14:53 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #penetration_testing #web_security #bug_hunting
Medium
How SQL Injection Lets Attackers Steal Data: A Hands-On Guide to Blind and Error-Based SQLi
SQL injection vulnerability allows an attacker to interfere with the queries that an application makes to its database. It can allow an…
29 views
Daily Writeups
⤷ Title: [IronCorp] — Breaking a Windows Machine Through DNS Recon, Auth Bruteforce, and Command Injection
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 08:13:18 GMT
════════════════════════
⌗ Tags: #command_injection #capture_the_flag #tryhackme #windows_rce #ironcorp
Medium
[IronCorp] — Breaking a Windows Machine Through DNS Recon, Auth Bruteforce, and Command Injection
From DNS Enumeration to Remote Code Execution on a Hardened Windows Target.
❤1
27 views
Daily Writeups
⤷ Title: Benefits of Learning Cloud Computing: A Smart Career Move for Future IT Professionals
════════════════════════
𐀪 Author: Indoreiant
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 08:16:54 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cloud_computing #data_science #education
Medium
Benefits of Learning Cloud Computing: A Smart Career Move for Future IT Professionals
In today’s rapidly evolving digital world, businesses are increasingly moving their operations to the cloud. From startups to multinational…
40 views
Daily Writeups
⤷ Title: Understanding Process Memory and Cross-Process Operations in Windows
════════════════════════
𐀪 Author: Sunilkumar
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 08:02:22 GMT
════════════════════════
⌗ Tags: #ai #windows #malware #ethical_hacking #cybersecurity
Medium
Understanding Process Memory and Cross-Process Operations in Windows
Introduction
43 views
Daily Writeups
⤷ Title: How I Bypassed a Billion-Dollar Fintech’s MFA with a Single Content-Type Twist
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 10:50:08 GMT
════════════════════════
⌗ Tags: #pentesting #security #bug_bounty #cybersecurity #bug_bounty_tips
Medium
How I Bypassed a Billion-Dollar Fintech’s MFA with a Single Content-Type Twist
We’ve all seen the classic bug bounty write-ups. “How I found a $10,000 Remote Code Execution by staring at a base64 string for 72 hours.”…
35 views
Daily Writeups
⤷ Title: Reflected XSS Made Stupidly Simple
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #hackerone #bugcrowd #hacker #bug_bounty_writeup #hacking
Medium
Reflected XSS Made Stupidly Simple
Hey everyone! Nitin here ⚡
21 views
Daily Writeups
⤷ Title: How do hackers steal cookies?
════════════════════════
𐀪 Author: Elvinlatifli
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:22:19 GMT
════════════════════════
⌗ Tags: #hacking #malware #malware_development #maldev
Medium
How do hackers steal cookies?
When we analyze browser security, we usually default to discussing sandbox architectures, Site Isolation, or XSS mitigations. However, when…
19 views
Daily Writeups
⤷ Title: If I Were an Attacker: Thinking About Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: Mukut | Real-World Cybersecurity
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 10:58:54 GMT
════════════════════════
⌗ Tags: #web_security #infosec #ethical_hacking #penetration_testing #cybersecurity
Medium
If I Were an Attacker: Thinking About Cross-Site Scripting (XSS)
Modern web applications are highly interactive.
24 views
Daily Writeups
⤷ Title: TryHackMe — Friday Overtime
════════════════════════
𐀪 Author: Efe Özel
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:39:46 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme_walkthrough #tryhackme #analysis
Medium
TryHackMe — Friday Overtime
Scenario: It’s a Friday evening at PandaProbe Intelligence when a notification appears on your CTI platform. While most are already looking…
28 views
Daily Writeups
⤷ Title: TryHackMe — RAG Security Fundamentals | Full Walkthrough
════════════════════════
𐀪 Author: Sudarshan Ajoy Sindhu
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:25:00 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
Medium
TryHackMe — RAG Security Fundamentals | Full Walkthrough
Room: RAG Security Fundamentals Category: AI Security
40 views
Daily Writeups
⤷ Title: Cloud Security Fundamentals | TryHackMe | practical lab
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 10:40:17 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #pentesting #tryhackme_walkthrough #cloud_security
Medium
Cloud Security Fundamentals | TryHackMe | practical lab
Learn cloud security fundamentals and walk a guided, cloud-agnostic attack chain end to end.
40 views
Daily Writeups
⤷ Title: SQL Mistakes Beginners Make (And How to Avoid Them)
════════════════════════
𐀪 Author: Anurodh Kumar
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:00:11 GMT
════════════════════════
⌗ Tags: #sql_server #data #sql_injection #database #sql
Medium
SQL Mistakes Beginners Make (And How to Avoid Them)
Learning SQL is one of the best investments you can make if you want a career in data analytics, business intelligence, data engineering…
49 views
Daily Writeups
⤷ Title: Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 18:53:03 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: DockerLabs CTF: Countdown Walkthrough — WPvivid RCE & Advanced Hex File Reconstruction
════════════════════════
𐀪 Author: SWALE
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 12:32:21 GMT
════════════════════════
⌗ Tags: #ctf #digital_forensics #dockerlabs #cybersecurity #bug_bounty
Medium
DockerLabs CTF: Countdown Walkthrough — WPvivid RCE & Advanced Hex File Reconstruction
The transition from structured Capture The Flag (CTF) environments to the unpredictable landscape of live bug bounty hunting — on platforms…
34 views
Daily Writeups
⤷ Title: API Attacks 102: Login Olmak Yetmez, Yetki Kontrolü Şart
════════════════════════
𐀪 Author: İlkan Aydoğan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 13:44:26 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #owasp_api_security_top_10 #application_security #web_security
Medium
API Attacks 102: Login Olmak Yetmez, Yetki Kontrolü Şart
API güvenliğinde en sık yapılan hatalardan biri şudur:
25 views
Daily Writeups
⤷ Title: API Attacks 101: API’ler Neden Kritik Bir Saldırı Yüzeyi?
════════════════════════
𐀪 Author: İlkan Aydoğan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 13:28:47 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #owasp_api_security_top_10 #application_security #api_security
Medium
API Attacks 101: API’ler Neden Kritik Bir Saldırı Yüzeyi?
Bugün kullandığımız neredeyse her dijital ürünün arka planında API’ler var.
25 views
Daily Writeups
⤷ Title: How to Build a Role-Based Access Control (RBAC) System
════════════════════════
𐀪 Author: Ushani Saubhagya
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:53:32 GMT
════════════════════════
⌗ Tags: #authentication #authorization #role_based_access_control #software_security #application_security
Medium
How to Build a Role-Based Access Control (RBAC) System
A step-by-step guide to designing secure, scalable authorization systems using roles, permissions, and best practices.
27 views