Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: How I Found 7 Vulnerabilities in OWASP crAPI, and the Reasoning Behind Each One
════════════════════════
𐀪 Author: Akash
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 11:38:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #api_security #cybersecurity #bug_bounty #infosec
Medium
How I Found 7 Vulnerabilities in OWASP crAPI, and the Reasoning Behind Each One
The thinking behind each find, not just the payloads.
8 views
Daily Writeups
⤷ Title: Nineteen Findings, And The One That Scared Me
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #security #hacking #bug_bounty
Medium
Nineteen Findings, And The One That Scared Me
Nineteen findings in a regulated health application. Eighteen were work. One made me walk around the block before writing it up.
8 views
Daily Writeups
⤷ Title: I Let an AI Coding Assistant Build My Web App — Then I Reviewed Every Security Assumption
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:26:42 GMT
════════════════════════
⌗ Tags: #data_science #web_development #python #bug_bounty #machine_learning
Medium
I Let an AI Coding Assistant Build My Web App — Then I Reviewed Every Security Assumption
AI can build a working web app surprisingly fast. The interesting part begins when you stop asking whether the code works and start asking…
8 views
Daily Writeups
⤷ Title: I Used Burp Suite to Understand What My Browser Was Actually Sending
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:04:17 GMT
════════════════════════
⌗ Tags: #web_development #machine_learning #bug_bounty #python #data_science
Medium
I Used Burp Suite to Understand What My Browser Was Actually Sending
I thought I understood how websites worked until I stopped looking at the page and started looking at the requests behind it.
7 views
Daily Writeups
⤷ Title: Path Traversal Explained: How One File Parameter Exposes Your Server’s Secrets | by Samadhan…
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:01:04 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #cybersecurity #bug_bounty #path_traversal
Medium
Path Traversal Explained: How One File Parameter Exposes Your Server’s Secrets | by Samadhan Shimple
A practical guide to understanding, testing, and fixing path traversal vulnerabilities
7 views
Daily Writeups
⤷ Title: Triage Copilot Security Review Findings Before You Apply the Fixes
════════════════════════
𐀪 Author: The Review Surface
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #ai_coding #application_security #github_copilot #secure_coding #code_review
Medium
Triage Copilot Security Review Findings Before You Apply the Fixes
A finding-by-finding ledger for verifying evidence, fix scope, re-testing, and optional PR dispositions before Copilot security suggestions…
7 views
Daily Writeups
⤷ Title: Dynamic Application Security Testing in UAE: Lessons from the 2015 TalkTalk SQL Injection Breach.
════════════════════════
𐀪 Author: VAPT Security
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 11:51:09 GMT
════════════════════════
⌗ Tags: #devsecops #uae #penetration_testing #application_security #cybersecurity
Medium
Dynamic Application Security Testing in UAE: Lessons from the 2015 TalkTalk SQL Injection Breach.
Can a single unpatched web page bring down a company’s customer trust overnight? In 2015, UK telecom provider TalkTalk found out the hard…
6 views
Daily Writeups
⤷ Title: A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
════════════════════════
𐀪 Author: Bhargav Buddh
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:50:11 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #information_security #hacking #web_application_security
Medium
A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
Investigating suspicious activity, unexpected external links, and hidden SEO spam in a WordPress website.
7 views
Daily Writeups
⤷ Title: I Stopped Installing Random Hacking Tools and Built My Own Python Toolkit
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:41:51 GMT
════════════════════════
⌗ Tags: #programming #hacking #python #technology #data_science
Medium
I Stopped Installing Random Hacking Tools and Built My Own Python Toolkit
After testing security tools, I realized that a few small Python scripts could automate the repetitive work I kept doing by hand.
10 views
Daily Writeups
⤷ Title: PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:56:21 GMT
════════════════════════
⌗ Tags: #hacking #programming #software_development #php #software_engineering
Medium
PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
We have seen this movie before, and it never gets less uncomfortable.
20 views
Daily Writeups
⤷ Title: How to Recover a Hacked Crypto Exchange and Prevent Future Attacks
════════════════════════
𐀪 Author: Karthick Prabhu
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:53:24 GMT
════════════════════════
⌗ Tags: #fraud_prevention #crypto_exchange #cryptocurrency #crypto_exchange_platform #hacking
Medium
How to Recover a Hacked Crypto Exchange and Prevent Future Attacks
Security remains one of the biggest challenges facing cryptocurrency exchanges. As trading platforms handle significant volumes of digital…
12 views
Daily Writeups
⤷ Title: Beyond the CVSS Score: How Mature Teams Actually Manage Vulnerabilities
════════════════════════
𐀪 Author: Gopal Rajguru
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:09:33 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #vulnerability #cybercrime #hacking
Medium
Beyond the CVSS Score: How Mature Teams Actually Manage Vulnerabilities
Most vulnerability programs are overwhelmed by findings and have little ability to prioritize beyond the CVSS score. In this post I…
7 views
Daily Writeups
⤷ Title: Everyone wants to be a hacker. Nobody wants to write the report.
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:01:02 GMT
════════════════════════
⌗ Tags: #infosec #security #cybersecurity #hacking #ai
Medium
Everyone wants to be a hacker. Nobody wants to write the report.
And the report is 70% of the job.
10 views
Daily Writeups
⤷ Title: CyberDefenders: African Falls
════════════════════════
𐀪 Author: Sushma
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 11:59:36 GMT
════════════════════════
⌗ Tags: #ctf #infosec #information_security #ctf_writeup #cybersecurity
Medium
CyberDefenders: African Falls
Scenario: John Doe is accused of illegal activity, and a disk image of his laptop was taken. You analyze the image to work out what…
17 views
Daily Writeups
⤷ Title: Network Traffic Basics: What to Observe, Where Traffic Flows, and How to Capture It
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:43:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #tryhackme_walkthrough #tryhackme #infosec
Medium
Network Traffic Basics: What to Observe, Where Traffic Flows, and How to Capture It
Introduction
16 views
Daily Writeups
⤷ Title: The Protocol Nobody Blocks: How Attackers Steal Data Through DNS Queries
════════════════════════
𐀪 Author: Miss 0x424D
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:17:47 GMT
════════════════════════
⌗ Tags: #network_security #cybersecurity #ethical_hacking #infosec #technology
Medium
The Protocol Nobody Blocks: How Attackers Steal Data Through DNS Queries
A technical deep-dive into DNS Tunneling the technique that hides stolen data, reverse shells, and entire C2 channels inside the one…
10 views
Daily Writeups
⤷ Title: Hidden CTF HackMyVM: From cipher to root
════════════════════════
𐀪 Author: kuro
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:44:50 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf_writeup #cybersecurity #penetration_testing #ctf
Medium
Hidden CTF HackMyVM: From cipher to root
Introduction
10 views
Daily Writeups
⤷ Title: I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes
════════════════════════
𐀪 Author: Foysal Hossain, Senior Consultant @EY
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:01:09 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #pentesting #android_pentesting #penetration_testing #bug_hunting
Medium
I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes
Five minutes. That’s all it took between opening a rooted Android device for the first time and sitting on a Critical severity finding in a…
11 views
Daily Writeups
⤷ Title: OhSINT Room — exif and ohSINT
════════════════════════
𐀪 Author: Adrojadhruv
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 12:18:52 GMT
════════════════════════
⌗ Tags: #adrojadhruv #tryhackme #osint #ohsint #exif
Medium
OhSINT Room — exif and ohSINT
Yo guys! I just completed my first OSINT room on TryHackMe!
10 views
Daily Writeups
⤷ Title: TryHackMe — The Impossible Challenge Writeup
════════════════════════
𐀪 Author: Mahidul Haque
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 11:13:11 GMT
════════════════════════
⌗ Tags: #cryptography #tryhackme #capture_the_flag #ctf #ctf_writeup
Medium
TryHackMe — The Impossible Challenge Writeup
Overview
12 views