Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: 15 Copy-Paste cURL One-Liners to Test an API for IDOR, Auth Bypass and CORS
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 14:47:41 GMT
════════════════════════
⌗ Tags: #software_development #bug_bounty #cybersecurity #ethical_hacking #programming
Medium
15 Copy-Paste cURL One-Liners to Test an API for IDOR, Auth Bypass and CORS
No Burp Suite. No fancy setup. Just your terminal and 15 commands that find the three bugs that pay the most. 🧪
12 views
Daily Writeups
⤷ Title: The File Uploaded Successfully. That Was the First Mistake.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 15:23:00 GMT
════════════════════════
⌗ Tags: #coding #ethical_hacking #technology #programming #cybersecurity
Medium
The File Uploaded Successfully. That Was the First Mistake.
How file-upload validation, content-type confusion, storage design, and unsafe processing turn an ordinary feature into a security boundary…
45 views
Daily Writeups
⤷ Title: How to Discover Hidden API Endpoints Using JavaScript Analysis
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:33:32 GMT
════════════════════════
⌗ Tags: #hacking #ai #programming #cybersecurity #bug_bounty
Medium
How to Discover Hidden API Endpoints Using JavaScript Analysis
Hi, I’m Vipul — the human behind TheHackersLog.
8 views
Daily Writeups
⤷ Title: The Server Fetched the URL. I Never Expected It to Reach That Network.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:23:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #programming #technology #coding
Medium
The Server Fetched the URL. I Never Expected It to Reach That Network.
How server-side request forgery turns seemingly harmless URL-fetching features into unexpected access to internal services, cloud metadata…
16 views
Daily Writeups
⤷ Title: 15 Programs That Actually Pay Fast (And How to Find More Like Them)
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 14:10:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #software_development #ethical_hacking #bug_bounty
Medium
15 Programs That Actually Pay Fast (And How to Find More Like Them)
Not fast replies — fast money. 15 real bug bounty programs, ranked by how long hunters actually wait to get paid. 💸
9 views
Daily Writeups
⤷ Title: How to Turn Any Old Router Into a $20 SOC (My Exact Config)
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:41:20 GMT
════════════════════════
⌗ Tags: #hacking #soc #cybersecurity #diy_electronics #programming
Medium
How to Turn Any Old Router Into a $20 SOC (My Exact Config)
I have a $300 ASUS router in my closet. It’s unplugged. I’m using a $26 yellow box that outperforms it every day.
14 views
Daily Writeups
⤷ Title: The Internet of Things is Held Together With Duct Tape and Default Passwords[Badly]
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:17:51 GMT
════════════════════════
⌗ Tags: #information_security #programming #iot #hacking #cybersecurity
Medium
The Internet of Things is Held Together With Duct Tape and Default Passwords[Badly]
My smart light bulb tried to mine crypto last Tuesday.
14 views
Daily Writeups
⤷ Title: The API Accepted Fields I Never Expected It to Accept
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:05:32 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #programming #coding #cybersecurity
Medium
The API Accepted Fields I Never Expected It to Accept
How mass assignment turns ordinary JSON fields into privilege escalation, unauthorized account changes, and broken trust between clients…
23 views
Daily Writeups
⤷ Title: The Request Was Valid. The Business Logic Wasn’t.
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:28:21 GMT
════════════════════════
⌗ Tags: #programming #technology #cybersecurity #coding #ethical_hacking
Medium
The Request Was Valid. The Business Logic Wasn’t.
How attackers exploit workflow assumptions, inconsistent state transitions, pricing mistakes, and missing server-side rules to make…
58 views
Daily Writeups
⤷ Title: OpenCode Hacked: User credentials leaked
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 09:09:53 GMT
════════════════════════
⌗ Tags: #software_development #hacking #software #programming #software_engineering
Medium
OpenCode Hacked: User credentials leaked
A security incident that touches only 1.4 percent of users can still feel large when the product sits at the intersection of code and…
43 views
Daily Writeups
⤷ Title: Are Sandboxes Obsolete against AI Agents?
════════════════════════
𐀪 Author: Taulan Zauzanov
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:25:39 GMT
════════════════════════
⌗ Tags: #programming #penetration_testing #cybersecurity #ai #pentesting
Medium
Are Sandboxes Obsolete against AI Agents?
If even 1% of AI sandbox escape stories are true, then as cybersecurity professionals, we face a new, stark reality: sandboxing AI agents…
36 views
Daily Writeups
⤷ Title: The Tools Didn’t Make Me Better. The Experiments Did.
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 10:37:58 GMT
════════════════════════
⌗ Tags: #data_science #bug_bounty #python #web_development #programming
Medium
The Tools Didn’t Make Me Better. The Experiments Did.
I spent time exploring AI coding tools, but the biggest improvement in my workflow came when I stopped collecting tools and started testing…
12 views
Daily Writeups
⤷ Title: I Turned Linux Practices Into a Working Security Monitor
════════════════════════
𐀪 Author: Lynenaz
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:51:39 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #programming #technology #ethical_hacking
Medium
I Turned Linux Practices Into a Working Security Monitor
Reading about Linux commands never made me job-ready. So I stopped reading — and built a night-shift surveillance post instead. Here’s the…
24 views
Daily Writeups
⤷ Title: I Stopped Reading Error Messages as Errors
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 14:59:47 GMT
════════════════════════
⌗ Tags: #programming #technology #coding #ethical_hacking #cybersecurity
Medium
I Stopped Reading Error Messages as Errors
How HTTP status codes, TCP resets, timeouts, and application exceptions reveal what is happening beneath the surface.
18 views
Daily Writeups
⤷ Title: White Hat Hacker from Tajikistan: How Pro Muzafarov Shukron Safeguards the Global Cyber World…
════════════════════════
𐀪 Author: Draklennn
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:11:18 GMT
════════════════════════
⌗ Tags: #infosec #programming #white_hat_hacker #cybersecurity #bug_bounty
Medium
White Hat Hacker from Tajikistan: How Pro Muzafarov Shukron Safeguards the Global Cyber World…
The Journey Into Cybersecurity Pro Muzafarov Shukron began his career in information security by deeply studying network architecture, web…
8 views
Daily Writeups
⤷ Title: PentAGI: An AI Agent That Can Try to Hack Your Application Before Someone Else Does
════════════════════════
𐀪 Author: CodeWithYog
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 02:20:12 GMT
════════════════════════
⌗ Tags: #software_development #artificial_intelligence #penetration_testing #technology #programming
Medium
PentAGI: An AI Agent That Can Try to Hack Your Application Before Someone Else Does
I spend a lot of time thinking about how AI agents can help us write software. PentAGI made me think about the other side of development…
28 views
Daily Writeups
⤷ Title: IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:09:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #bug_bounty #programming #api_security
Medium
🔓 IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
Broken Object Level Authorization — IDOR, to most of us — is the single most common serious bug in modern APIs. It sits at #1 on the OWASP…
16 views
Daily Writeups
⤷ Title: 7 Ways Attackers Can Abuse an API Even When Authentication Works
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 06:16:01 GMT
════════════════════════
⌗ Tags: #api_security #web_development #software_engineering #programming #cybersecurity
Medium
7 Ways Attackers Can Abuse an API Even When Authentication Works
Valid credentials do not guarantee that a request is safe.
44 views
Daily Writeups
⤷ Title: I Stopped Installing Random Hacking Tools and Built My Own Python Toolkit
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:41:51 GMT
════════════════════════
⌗ Tags: #programming #hacking #python #technology #data_science
Medium
I Stopped Installing Random Hacking Tools and Built My Own Python Toolkit
After testing security tools, I realized that a few small Python scripts could automate the repetitive work I kept doing by hand.
5 views
Daily Writeups
⤷ Title: PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:56:21 GMT
════════════════════════
⌗ Tags: #hacking #programming #software_development #php #software_engineering
Medium
PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
We have seen this movie before, and it never gets less uncomfortable.
6 views