Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: The $2500 bug: Remote Code Execution via Supply Chain Attack
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hackerone #bug_bounty #bug_bounty_tips #hacking
Medium
💵 The $2500 bug: Remote Code Execution via Supply Chain Attack
Hey there!😇
13 views
Daily Writeups
⤷ Title: How I Earned $8947 bounty for Remote Code Execution via a Hijacked GitHub Module
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #hackerone #bug_bounty #bugbounty_writeup #hacking
Medium
How I Earned $8947 💰bounty for Remote Code Execution via a Hijacked GitHub Module
Earlier this year, I discovered a High severity Remote Code Execution (RCE) vulnerability affecting a big company (referred to as Redacted for confidentiality). Through a combination of my…
12 views
Daily Writeups
⤷ Title: Crack Windows Password [Ethical Hacking Article]
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:34:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #hacking #ethical_hacking
Medium
Crack Windows Password [Ethical Hacking Article]
This Article describes you to reset your windows password by using manipulation technique.
12 views
Daily Writeups
⤷ Title: The Secrets Behind Subdomain Takeovers Nobody Shares
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:33:29 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #secrets #bug_bounty #subdomain
Medium
👀The Secrets Behind Subdomain Takeovers Nobody Shares
Free Article Link
10 views
Daily Writeups
⤷ Title: $1000+ Passive Recon Strategy You’re Not Using (Yet)
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:30:08 GMT
════════════════════════
⌗ Tags: #hacking #subdomains_enumeration #subdomain #earnings #bug_bounty
Medium
$1000+ Passive Recon Strategy You’re Not Using (Yet)
Still using subfinder & sublist3r tools for finding assets while recon??
22 views
Daily Writeups
⤷ Title: API Hacking on Mercedes-Benz
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:28:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #cybersecurity #programming #hacking
Medium
API Hacking on Mercedes-Benz
How Recon and Persistence Led to a Valid XSS on Mercedes-Benz
17 views
Daily Writeups
⤷ Title: $300 Bounty: SSRF to Cloud Metadata
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:25:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #report #bug_bounty
Medium
$300 Bounty: SSRF to Cloud Metadata
Phabricator SSRF Vulnerability: Unauthorized Access
17 views
Daily Writeups
⤷ Title: Google Cloud Account Takeover via URL Parsing Confusion
════════════════════════
𐀪 Author: Mohamed Benchikh
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:23:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #bug_bounty_writeup
Medium
Google Cloud Account Takeover via URL Parsing Confusion
TL;DR
14 views
Daily Writeups
⤷ Title: My First Paid Bug Bounty: A Hidden Gallery & A Lesson in Misconfiguration :-)
════════════════════════
𐀪 Author: Naitik Gupta
════════════════════════
ⴵ Time: Fri, 02 May 2025 14:49:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #naitikgupta
Medium
🐞 My First Paid Bug Bounty: A Hidden Gallery & A Lesson in Misconfiguration :-)
👋 About Me
14 views
Daily Writeups
⤷ Title: Payloads in Plain Sight: How Open Redirect + JavaScript Led to Full Account Takeover
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:10:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #money #infosec #bug_bounty
Medium
💣 Payloads in Plain Sight: How Open Redirect + JavaScript Led to Full Account Takeover 🔁🎯
Hey there!😁
16 views
Daily Writeups
⤷ Title: Web Security & Bug Bounty: Learn Penetration Testing — Chapter 1
════════════════════════
𐀪 Author: Riki SatyaGraha
════════════════════════
ⴵ Time: Fri, 02 May 2025 09:06:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #ethical_hacking #penetration_testing
16 views
Daily Writeups
⤷ Title: Persistence via Registry — How Attackers Abuse the Windows Registry
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:12:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_technology #cybersecurity #information_security #hacking
Medium
Persistence via Registry — How Attackers Abuse the Windows Registry
One of the most common methods attackers use to maintain access to compromised systems is persistence via the Windows Registry. The…
15 views
Daily Writeups
⤷ Title: ️‍♂️ Subdomain Enumeration Automation for Bug Bounty: Save Time, Hack Smart!
════════════════════════
𐀪 Author: Shady Farouk
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:09:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #bounty_program #hacker_news #hackerone
Medium
🕵️‍♂️ Subdomain Enumeration Automation for Bug Bounty: Save Time, Hack Smart!
Ahoy, hacker sailors! ⚓ Whether you’re a seasoned bug bounty hunter or a script kiddie-turned-cyber-ninja, you know the thrill of…
13 views
Daily Writeups
⤷ Title: $400 Bounty: OAuth Token Theft in One Click
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 02 May 2025 03:52:50 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #bug_bounty #report
Medium
$400 Bounty: OAuth Token Theft in One Click
Redirects + OAuth = A Recipe for Token Theft
11 views
Daily Writeups
⤷ Title: From File Upload to Credential Theft: My $1,000 Bounty Journey with Stored XSS
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Fri, 02 May 2025 03:46:24 GMT
════════════════════════
⌗ Tags: #xss_attack #infosec_write_ups #ethical_hacking #osint #bug_bounty
Medium
🚀 From File Upload to Credential Theft: My $1,000 Bounty Journey with Stored XSS 🚀
How a simple file upload feature became a hacker’s playground — and my payday.
10 views
Daily Writeups
⤷ Title: [EP. 2] Feature or Flaw — Cookie Attributes
════════════════════════
𐀪 Author: Pattharadanai Sanitjairak
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:50:17 GMT
════════════════════════
⌗ Tags: #web_development #owasp #vulnerability #application_security #cookies
Medium
[EP. 2] Feature or Flaw — Cookie Attributes
การที่ระบบไม่ได้เซ็ตค่า Attribute บางอย่างใน Session Cookie นั้นมันดีหรือไม่? — Testing for Cookies Attributes (WSTG-SESS-02)
14 views
Daily Writeups
⤷ Title: Top 7 Legacy Application Modernization Strategies for 2025
════════════════════════
𐀪 Author: Shikhar Gupta
════════════════════════
ⴵ Time: Fri, 02 May 2025 06:07:00 GMT
════════════════════════
⌗ Tags: #application_security #application_architecture #application_modernization #software_development
Medium
Top 7 Legacy Application Modernization Strategies for 2025
In today’s digital-first landscape, businesses are under increasing pressure to innovate, adapt, and deliver enhanced user experiences…
8 views
Daily Writeups
⤷ Title: 4,800+ IPs Used in Massive Recon Attack Targeting Git Configuration Files — What You Need to Know
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Fri, 02 May 2025 03:13:24 GMT
════════════════════════
⌗ Tags: #application_security #cyber_security_awareness #cybersecurity #information_security #git
Medium
4,800+ IPs Used in Massive Recon Attack Targeting Git Configuration Files — What You Need to Know
Imagine this: your source code, commit history, and even credentials — all quietly exposed, just because of a forgotten directory in your…
10 views
Daily Writeups
⤷ Title: Firewalls vs WAFs: Defending Your Digital Fortress from the Network to the Application Layer
════════════════════════
𐀪 Author: Diogo Neto
════════════════════════
ⴵ Time: Thu, 01 May 2025 21:06:15 GMT
════════════════════════
⌗ Tags: #networking #protection #waf #application_security #firewall
Medium
Firewalls vs WAFs: Defending Your Digital Fortress from the Network to the Application Layer
Cyber threats evolve fast, and your defenses should too. Learn the difference between firewalls and WAFs — and why having both is critical…
12 views
Daily Writeups
⤷ Title: How to Prevent Malicious .EPUB File Uploads in Java
════════════════════════
𐀪 Author: Cloudmersive
════════════════════════
ⴵ Time: Thu, 01 May 2025 20:31:30 GMT
════════════════════════
⌗ Tags: #epub #application_security #virus_scan #java #file_upload_vulnerability
Medium
How to Prevent Malicious .EPUB File Uploads in Java
If you’re developing applications in the digital publishing space, there’s a good chance you’ve worked with .epub files. They seem simple…
14 views