Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Nigeria-Based Fraudsters Hijack .edu Accounts to Run University Job Scams
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:00:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #advance fee fraud #Check Fraud #Credential Phishing #edu account takeover #Higher Education #Job Scam #Proofpoint #university job scams
Daily CyberSecurity
Nigeria-Based Fraudsters Hijack .edu Accounts to Run University Job Scams
A fake IT form told students to type their password into a field labeled “WORDWORD.” The trick dodged the form site’s word filter, and it worked. According to Proofpoint’s …
14 views
Daily Writeups
⤷ Title: OAuth Exploitation
════════════════════════
𐀪 Author: Amrsmooke
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 09:14:02 GMT
════════════════════════
⌗ Tags: #authentication #penetration_testing #bug_bounty #hacking
Medium
OAuth Exploitation
To exploit OAuth 2.0, you must first understand how its core components interact. When flaws appear in these trust relationships…
13 views
Daily Writeups
⤷ Title: The Tiny Project Logic Bug That Unlocked Enterprise
════════════════════════
𐀪 Author: Krishn Babariya
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 09:01:46 GMT
════════════════════════
⌗ Tags: #pentesting #web_pentesting #vulnerability_disclosure #bug_bounty #vapt
Medium
The Tiny Project Logic Bug That Unlocked Enterprise
How a tiny edge case in project grouping turned into a subscription-boundary bypass.
13 views
Daily Writeups
⤷ Title: FunboxEasy — From SQL Injection to Remote Code Execution
════════════════════════
𐀪 Author: Anju
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:57:41 GMT
════════════════════════
⌗ Tags: #learning #growth #offsec #hacking #cybersecurity
Medium
FunboxEasy — From SQL Injection to Remote Code Execution
Web Application Penetration Testing Walkthrough
15 views
Daily Writeups
⤷ Title: CVE-2022–1471: Achieving RCE on Android with SnakeYAML via Custom Gadget Chains
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:50:40 GMT
════════════════════════
⌗ Tags: #hacking #rce #snakeyaml #android #cve_2022_1471
Medium
CVE-2022–1471: Achieving RCE on Android with SnakeYAML via Custom Gadget Chains
Akwaaba! everyone. Another Android app exploit writeup. Read my previous exploits Android App RCE via Dynamic Code Loading and $3000 Deep…
16 views
Daily Writeups
⤷ Title: Checkpoint | Hackthebox | Windows & AD | Medium
════════════════════════
𐀪 Author: The Mercury
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:42:35 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #ctf_writeup #active_directory_security #cybersecurity
Medium
Checkpoint | Hackthebox | Windows & AD | Medium
Given credentials ==> alex.turner:Checkpoint2024!
16 views
Daily Writeups
⤷ Title: Reporting
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:17:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #cyber_security_awareness #ethical_hacking #web_development
Medium
Reporting
Let me tell you something that most of the guys don’t know what to do after any successful guided pentest or after doing any kind of…
23 views
Daily Writeups
⤷ Title: Chanakya VulnHub Walkthrough: From Network Enumeration to Root Access.
════════════════════════
𐀪 Author: ITHINENI DHEERAJA CHANDRA KEERTHI
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 09:39:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #penetration_testing #ethical_hacking #ctf
Medium
Chanakya VulnHub Walkthrough: From Network Enumeration to Root Access.
A hands-on penetration-testing journey covering web enumeration, PCAP analysis, FTP credential discovery, SSH access, privilege escalation…
29 views
Daily Writeups
⤷ Title: Walkthrough: THM Linux Fundamentals (Pt3)
════════════════════════
𐀪 Author: Mark James Gonzales
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:49:13 GMT
════════════════════════
⌗ Tags: #tryhackme #linux
Medium
Walkthrough: THM Linux Fundamentals (Pt3)
Power-up your Linux skills and get hands-on with some common utilities that you are likely to use day-to-day!
44 views
Daily Writeups
⤷ Title: My RAG API Never Signs Tokens or Sees Passwords
════════════════════════
𐀪 Author: Rakeshnitb
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:37:20 GMT
════════════════════════
⌗ Tags: #api_security #llm #authentication #rags #software_architecture
Medium
My RAG API Never Signs Tokens or Sees Passwords
Four questions for designing auth on any RAG API, including the two attackers most designs forget. Grounded RAG in Production, Part 1.
49 views
Daily Writeups
⤷ Title: AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 17:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 16:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:15:28 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Amazon #Amazon Prime #Cybersecurity #Fraud #Phishing #Privacy #Scam
Hackread
Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details
An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.
34 views
Daily Writeups
⤷ Title: Two Researchers Found the Same Bug. One Got Paid. Here Is What Differed.
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #hacking #security #bug_bounty_tips #bug_bounty #cybersecurity
Medium
Two Researchers Found the Same Bug. One Got Paid. Here Is What Differed.
Reproduce it cold, lead with the consequence, pre-answer the closure, and run the loop after the bounty lands.
21 views
Daily Writeups
⤷ Title: Two Bug Bounty Programs Just Died. One Just Opened. Here’s What That Tells Me.
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:24:30 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #cybersecurity #bug_bounty_tips #bug_bounty
Medium
Two Bug Bounty Programs Just Died. One Just Opened. Here’s What That Tells Me.
The AI slop crisis is killing some programs and making others double down. Beginners need to know the difference.
20 views
Daily Writeups
⤷ Title: From DNS Record to Subdomain Takeover: A Dangling Tilda Configuration
════════════════════════
𐀪 Author: Alwoares naeem
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:23:00 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty #penetration_testing #web_security
Medium
From DNS Record to Subdomain Takeover: A Dangling Tilda Configuration
Why pointing at a SaaS provider isn’t a vulnerability until you prove the resource is claimable
21 views
Daily Writeups
⤷ Title: When Deleting the Default Workspace Made the Entire Account Unusable
════════════════════════
𐀪 Author: Ankit Rathva aka Gujarati Hacker
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:04:54 GMT
════════════════════════
⌗ Tags: #privilege_escalation #bug_bounty_writeup #hackerone #bug_bounty #bugcrowd
Medium
When Deleting the Default Workspace Made the Entire Account Unusable
While testing a web application for broken access control issues, I came across an interesting case where a workspace that was supposed to…
21 views
Daily Writeups
⤷ Title: Your Enterprise Just Adopted AI. Congratulations, You Also Adopted a New Attack Surface
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:14:10 GMT
════════════════════════
⌗ Tags: #ai #technology #hacking #cybersecurity #ethical_hacking
Medium
Your Enterprise Just Adopted AI. Congratulations, You Also Adopted a New Attack Surface
Enterprises are racing to deploy LLMs and agents because the productivity numbers look too good to ignore. The security numbers look less…
25 views
Daily Writeups
⤷ Title: I OSINT’d myself for an hour and now I sleep worse
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 11:11:10 GMT
════════════════════════
⌗ Tags: #infosec #ai #hacking #osint
Medium
I OSINT’d myself for an hour and now I sleep worse
Research is always your best friend, or is it?
21 views
Daily Writeups
⤷ Title: Storms Hitting the FBI
════════════════════════
𐀪 Author: Terry Schwadron
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 10:40:22 GMT
════════════════════════
⌗ Tags: #justice #fbi #investigation #politics #hacking
Medium
Storms Hitting the FBI
Terry H. Schwadron
24 views