Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: ️ Breaking the Web: Solving All Stages of the XSS Challenge (by yamagata21)
════════════════════════
𐀪 Author: Bhaskar Maity
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 17:05:04 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #xss_challenge #reflected_xss
Medium
XSS Challenges (by yamagata21)
XSS Challenges (by yamagata21)
13 views
Daily Writeups
⤷ Title: Root-Me: XSS — Stored 1
════════════════════════
𐀪 Author: _marwankhodair_
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 14:50:11 GMT
════════════════════════
⌗ Tags: #xss_attack #stored_xss #reflected_xss #xss_vulnerability #xss_bypass
Medium
Root-Me: XSS — Stored 1
Challenge Writeup by 0xMarvul
14 views
Daily Writeups
⤷ Title: How I Found 3 Security Bugs as a Beginner — My Real Bug Bounty Kickstart!
════════════════════════
𐀪 Author: Priyaagitaa
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 17:36:41 GMT
════════════════════════
⌗ Tags: #web_application_security #idor #bug_bounty #business_logic_flaw #xss_vulnerability
Medium
How I Found 3 Security Bugs as a Beginner — My Real Bug Bounty Kickstart!
Until recently, I had never imagined myself poking around websites to uncover security flaws. I was just getting started with web…
19 views
Daily Writeups
⤷ Title: PortSwigger XSS Labs: A Complete Guide to All 9 Apprentice-Level Challenges
════════════════════════
𐀪 Author: Thanuj Dilshan Thilakarathne
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 10:04:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_vulnerability #portswigger #ethical_hacking #web_security
Medium
PortSwigger XSS Labs: A Complete Guide to All 9 Apprentice-Level Challenges
In this report, I will walk through all the Apprentice Labs available in Portswigger’s XSS Labs.
13 views
Daily Writeups
⤷ Title: HackTheBox — PenTest Notes Writeup
════════════════════════
𐀪 Author: Nyx0r
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 18:01:05 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #source_code #sql_injection
Medium
HackTheBox — PenTest Notes Writeup
This challenge tests our skills in Source Code analysis and Web Exploitation Skills. To start solving this challenge, we need to start an…
9 views
Daily Writeups
⤷ Title: Web Security — SMT Program 2025 Write-up
════════════════════════
𐀪 Author: Gracialy
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 14:43:56 GMT
════════════════════════
⌗ Tags: #local_file_inclusion #ctf #web_security #sql_injection
Medium
Web Security — SMT Program 2025 Write-up
After taking a few months off, I’m back working through the fundamentals of CTFs. This time, I’m branching out into new categories…
10 views
Daily Writeups
⤷ Title: Siber Güvenlik Nedir?
════════════════════════
𐀪 Author: Gamze Nur İlgün
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 07:41:54 GMT
════════════════════════
⌗ Tags: #sql_injection #hacking #cybersecurity #cia #siber_güvenlik
Medium
Siber Güvenlik Nedir?
Herkese merhaba, günümüzün artık neredeyse en çok konuşulan konularından siber güvenlik ve siber güvenlikle birlikte en çok karşımıza çıkan…
7 views
Daily Writeups
⤷ Title: Irish Name Repo 3 — PicoCTF — Writeup
════════════════════════
𐀪 Author: 0xSudo
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 19:30:27 GMT
════════════════════════
⌗ Tags: #challenge #sql_injection #hacking #picoctf
Medium
Irish Name Repo 3 — PicoCTF — Writeup
This is another similar challenge where I need to do SQL injection. But the catch is the password is encrypted.
10 views
Daily Writeups
⤷ Title: How to Detect Mass Error-Based SQL Injection with Google Dorks, FOFA, NUCLEI, and Automation
════════════════════════
𐀪 Author: Anonymous27
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 18:55:14 GMT
════════════════════════
⌗ Tags: #fofa #sql_injection #reconnaissance #bug_bounty #web_security
Medium
How to Detect Mass Error-Based SQL Injection with Google Dorks, FOFA, NUCLEI, and Automation
Some vulnerabilities aren’t hidden they’re just ignored. Buried beneath thousands of parameters, misconfigured endpoints, and lazy…
16 views
Daily Writeups
⤷ Title: From Manual Code Analysis to CVE-2025–54119.
════════════════════════
𐀪 Author: Marco Nappi
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 16:01:53 GMT
════════════════════════
⌗ Tags: #open_source #cve #php #sql_injection #cybersecurity
Medium
From Manual Code Analysis to CVE-2025–54119.
CVE-2025–54119
Description
Improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code…
21 views
Daily Writeups
⤷ Title: SQLi Guide: DB Exploitation Techniques
════════════════════════
𐀪 Author: Che Chalk • Cybersecurity Writer
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 22:58:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #sql_injection #web_vulnerabilities #penetration_testing
Medium
SQLi Guide: DB Exploitation Techniques
SQL injection exploits DB queries thru user input manipulation.
17 views
Daily Writeups
⤷ Title: Menguji Kerentanan SQL Injection pada DVWA hingga Dump Database
════════════════════════
𐀪 Author: veliadevs
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:02:46 GMT
════════════════════════
⌗ Tags: #sql_injection #sql #vulnerability #cybersecurity
Medium
Menguji Kerentanan SQL Injection pada DVWA hingga Dump Database
Sedikit insight tentang serangan SQL Injection
19 views
Daily Writeups
⤷ Title: How I Got on a US Government Hall of Fame in 5 Minutes.
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 06:31:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bugs #bug_bounty_tips #bug_bounty #cybersecurity
Medium
How I Got on a US Government Hall of Fame in 5 Minutes.
You’d think a government domain would be locked up tighter than a bank vault. Instead, I found a public directory listing that screamed…
9 views
Daily Writeups
⤷ Title: Unauthorized Privilege Escalation in Role Logic
════════════════════════
𐀪 Author: Ahmed Mahmoud
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 15:10:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty_writeup #privilege_escalation #bug_bounty_tips
Medium
Unauthorized Privilege Escalation in Role Logic
“سُبْحَانَكَ لا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا إِنَّكَ أَنْتَ الْعَلِيمُ الْحَكِيمُ”
11 views
Daily Writeups
⤷ Title: Hi Researcher!
════════════════════════
𐀪 Author: Bugcrowd
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 14:37:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bugcrowd #cybersecurity
Medium
Hi Researcher!
http://bugcrowd.com 🇮🇩
10 views
Daily Writeups
⤷ Title: Confluence Takeover: How a Simple Support Email Gave Me Full Wiki Access
════════════════════════
𐀪 Author: Vikash Maurya
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 12:38:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #atlassian #penetration_testing #bug_bounty_writeup #hacking
Medium
Confluence Takeover: How a Simple Support Email Gave Me Full Wiki Access
This bug started with a single email. I didn’t expect much when I hit send, but that tiny action opened the doors to an entire company’s…
11 views
Daily Writeups
⤷ Title: Cómo organizar tus reportes de Bug Bounty y potenciar tu progreso con IA
════════════════════════
𐀪 Author: Gorka
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 09:06:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_hunter #bugbounty_writeup #bug_bounty_writeup
Medium
Cómo organizar tus reportes de Bug Bounty y potenciar tu progreso con IA
Aprende del pasado y mejora el futuro
21 views
Daily Writeups
⤷ Title: Stored XSS to Privilege Escalation to Admin Takeover to Data Breach
════════════════════════
𐀪 Author: Ahmad Halabi
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 12:25:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #hacking #bug_bounty_writeup #bug_bounty_tips
Medium
Stored XSS to Privilege Escalation to Admin Takeover to Data Breach
Chain of Vulnerability Sequence (Stored XSS ➝ Privilege Escalation ➝ Admin Takeover ➝ Sensitive Data Leak ➝ Company at Risk)
31 views
Daily Writeups
⤷ Title: The 2025 GitHub Recon Checklist for Bug Bounty Hunters
════════════════════════
𐀪 Author: Tillson Galloway
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 21:44:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #security #recon #cybersecurity #information_security
Medium
The 2025 GitHub Recon Checklist for Bug Bounty Hunters
GitHub is a goldmine for bug bounty recon. Many organizations (and their developers) unknowingly expose sensitive information through code…
24 views
Daily Writeups
⤷ Title: ️‍♂️ How I Bypassed the “Admin” Name Filter on example.target.com with a Unicode Homoglyph
════════════════════════
𐀪 Author: Aman Bhuiyan
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 11:25:07 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #recon #bug_bounty
Medium
🕵️‍♂️ How I Bypassed the “Admin” Name Filter on example.target.com with a Unicode Homoglyph
“If it looks like ‘Admin’, feels like ‘Admin’, and reads like ‘Admin’… is it really ‘Admin’?”
22 views