Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The File That Answered Back — XXE Hidden in Cell A2
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:59 GMT
════════════════════════
⌗ Tags: #xml #bug_bounty_writeup #bug_bounty #file_upload_vulnerability #xxe
Medium
The File That Answered Back — XXE Hidden in Cell A2
Most people know XXE. Few think to look for it inside a spreadsheet upload. But beneath every .xlsx is really a ZIP archive full of XML…
9 views
Daily Writeups
⤷ Title: RCE via Gemini Live AI Voice Session Misconfiguration.
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:53 GMT
════════════════════════
⌗ Tags: #google_gemini #rce #bug_bounty #security_misconfiguration #bugbounty_writeup
Medium
RCE via Gemini Live AI Voice Session Misconfiguration. Injecting Client-Controlled Setup Frames Through Unconstrained Ephemeral…
A growing number of products are building real-time AI voice features directly into their web applications. The most common pattern is a…
7 views
Daily Writeups
⤷ Title: How I Found a Critical OAuth Misconfiguration That Led to Account Takeover
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:43 GMT
════════════════════════
⌗ Tags: #account_takeover #bug_bounty_tips #bug_bounty #cybersecurity #bug_bounty_writeup
Medium
How I Found a Critical OAuth Misconfiguration That Led to Account Takeover
A bug bounty story about OAuth, PKCE, open client registration, and how multiple low-level issues chained together into a critical account…
12 views
Daily Writeups
⤷ Title: How I Found a Data Deletion Bypass via Subdomain Synchronization
════════════════════════
𐀪 Author: Viperblitzz
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:09 GMT
════════════════════════
⌗ Tags: #business_logic_error #bug_bounty_tips #bug_bounty #infosec #cybersecurity
Medium
How I Found a Data Deletion Bypass via Subdomain Synchronization
This is what I did after my lunch break and immediately got enough cash to buy stuff in the premium store
13 views
Daily Writeups
⤷ Title: PicoCTF Web Exploitation Easy Category Web Challenge [SSTL 1]
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:25:35 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #hacking #cybersecurity #bug_bounty #ctf
Medium
PicoCTF Web Exploitation Easy Category Web Challenge [SSTL 1]
Challenge Statement :- I made a cool website where you can announce whatever you want! Try it out. Additional details will be available…
9 views
Daily Writeups
⤷ Title: Disclosure of User Information via JSON Response on WordPress REST API
════════════════════════
𐀪 Author: harshit patel
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:49:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #wordpress #programming #bug_bounty
Medium
Disclosure of User Information via JSON Response on WordPress REST API
Ek unauthenticated endpoint jo poori user list leak kar deta hai — aur usse aage brute-force ka rasta khulta hai.
13 views
Daily Writeups
⤷ Title: Cyber Security Bootcamp
════════════════════════
𐀪 Author: Cozonix
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 07:37:51 GMT
════════════════════════
⌗ Tags: #hacking #technology #cybersecurity #cyber #cyber_security_awareness
Medium
Cyber Security Bootcamp
Fast-Track Your Career with Practical Cybersecurity Training
7 views
Daily Writeups
⤷ Title: How to Build a GitHub Action That Blocks Insecure Code Automatically
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 07:18:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #javascript #software_engineering #web_development #hacking
Medium
How to Build a GitHub Action That Blocks Insecure Code Automatically
Stop insecure code before it ever reaches your main branch — with a workflow that runs on every pull request.
8 views
Daily Writeups
⤷ Title: THM - Fools Mate, Revenge
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:01:01 GMT
════════════════════════
⌗ Tags: #hacking #technology #security #tech #cybersecurity
Medium
THM - Fools Mate, Revenge
A writeup for “Fools Mate, Revenge” on TryHackMe.
3 views
Daily Writeups
⤷ Title: THM - Fools Mate
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:01:01 GMT
════════════════════════
⌗ Tags: #hacking #security #technology #tech #cybersecurity
Medium
THM - Fools Mate
A writeup for “Fools Mate” on TryHackMe.
3 views
Daily Writeups
⤷ Title: Offensive Security Tooling — part 4
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:39:02 GMT
════════════════════════
⌗ Tags: #web_development #infosec #cybersecurity #cyber_security_awareness #ethical_hacking
Medium
Offensive Security Tooling — part 4
SQLMAP: The Basics
6 views
Daily Writeups
⤷ Title: SOC Team Internals — part 4
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:38:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #cybersecurity #infosec #web_development
Medium
SOC Team Internals — part 4
SOC Metrics and Objectives
6 views
Daily Writeups
⤷ Title: From Testing File Uploads to Discovering Remote Code Execution (RCE)
════════════════════════
𐀪 Author: Hussein Kteish
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 07:31:35 GMT
════════════════════════
⌗ Tags: #remote_code_execution #cybersecurity #penetration_testing
Medium
From Testing File Uploads to Discovering Remote Code Execution (RCE)
Introduction
8 views
Daily Writeups
⤷ Title: Exploiting Apache Tomcat Ghostcat (CVE-2020–1938): From Initial Access to Root | TryHackMe…
════════════════════════
𐀪 Author: Gokulnaath | Offensive Security
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:14:13 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve_2020_1938 #penetration_testing #apache_tomcat #cybersecurity
Medium
Exploiting Apache Tomcat Ghostcat (CVE-2020–1938): From Initial Access to Root | TryHackMe…
Introduction
11 views
Daily Writeups
⤷ Title: Pickle Rick |TryHackMe| Walkthrough|by Jahrin Binte Zahid
════════════════════════
𐀪 Author: Jahrin Binte Zahid
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:25:05 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme_writeup #ctf_writeup #tryhackme #tryhackme_walkthrough
Medium
Pickle Rick |TryHackMe| Walkthrough|by Jahrin Binte Zahid
A Rick and Morty CTF. Help turn Rick back into a human!
10 views
Daily Writeups
⤷ Title: TryHackMe Fools Mate, Revenge Write up
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:24:12 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup
Medium
TryHackMe Fools Mate, Revenge Write up
Do you have what it takes to defeat me and claim your prize?
16 views
Daily Writeups
⤷ Title: Windows PowerShell — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:20:29 GMT
════════════════════════
⌗ Tags: #windows #tryhackme #tryhackme_walkthrough #powershell #tryhackme_writeup
Medium
Windows PowerShell — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
22 views
Daily Writeups
⤷ Title: Mastering Network Analysis: A Complete Walkthrough of TryHackMe’s Wireshark and Tshark Challenges
════════════════════════
𐀪 Author: Ahmad Raza
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:47:16 GMT
════════════════════════
⌗ Tags: #tshark #network_security #wireshark #cybersecurity #ethical_hacking
32 views
Daily Writeups
⤷ Title: Case Study: How an Exposed .git Directory Left a Scientific Observatory Vulnerable
════════════════════════
𐀪 Author: Novahunter
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:26:50 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #ethical_hacking #cybersecurity #information_security #web_application_security
Medium
How an Exposed .git Directory Left a Scientific Observatory Vulnerable
Introduction 🔍
45 views
Daily Writeups
⤷ Title: New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 14:20:54 +0530
════════════════════════
⌗ Tags: No_Tags
33 views