Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Still Confused by Amass or Can’t Understand Its Results, This Is for You
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 07:48:39 GMT
════════════════════════
⌗ Tags: #owasp #money #students #recon #cybersecurity
Medium
Still Confused by Amass or Can’t Understand Its Results, This Is for You
Discovering the attack surface of a target is arguably the most critical phase of any penetration test or bug bounty hunt. If you don’t…
28 views
Daily Writeups
⤷ Title: The Internet Never Forgets : A Beginner’s Guide to OSINT
════════════════════════
𐀪 Author: AkiraSec
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 16:59:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #tech #technology #recon #open_source_intelligence
Medium
The Internet Never Forgets : A Beginner’s Guide to OSINT
Every click leaves a trace. OSINT is the art of reading them.
44 views
Daily Writeups
⤷ Title: How I Recon a Target, Part Two: Now We Poke It
════════════════════════
𐀪 Author: Babou
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 17:59:47 GMT
════════════════════════
⌗ Tags: #methodology #cybersecurity #rwanda #recon
Medium
How I Recon a Target, Part Two: Now We Poke It
Babou again. If you read part one, you’ll know I spent the whole thing being suspiciously well-behaved — mapping subdomains, ports…
26 views
Daily Writeups
⤷ Title: PentesterLab — Recon 10: Visual Reconnaissance
════════════════════════
𐀪 Author: Yosef
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 15:13:45 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #recon
Medium
PentesterLab — Recon 10: Visual Reconnaissance
A walkthrough of PentesterLab Recon 10, covering hexadecimal enumeration, Python automation, and visual reconnaissance using GoWitness.
59 views
Daily Writeups
⤷ Title: Bug Bounty Automation — Elite Recon Pipeline + bonus Script
════════════════════════
𐀪 Author: AYA
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 00:27:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #automation #penetration_testing #networking #recon
Medium
Bug Bounty Automation — Elite Recon Pipeline + bonus Script
The mistake the beginners do is they approaches reconnaissance like a linear process. Handed a /16 subnet or a wildcard domain, they load…
17 views
Daily Writeups
⤷ Title: CRTA - da Aplicação Web ao Domain Admin
════════════════════════
𐀪 Author: Roger Zeferino
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 16:08:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #enumeration #red_team #recon #penetration_testing
8 views
Daily Writeups
⤷ Title: The Lesser-Known Art of Recon Using Favicon Hashes
════════════════════════
𐀪 Author: Nothing
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 12:49:45 GMT
════════════════════════
⌗ Tags: #recon #osint #bug_bounty #cybersecurity #web_penetration_testing
Medium
The Lesser-Known Art of Recon Using Favicon Hashes
A practical guide to fingerprinting technology stacks at scale — and why one tiny, forgotten image file can leak more about a target’s…
11 views
Daily Writeups
⤷ Title: The 2026 Jeep Recon: A Jeep that lets you relive the Top Gear Botswana Special
════════════════════════
𐀪 Author: Ethan Wickramaratne
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 01:26:32 GMT
════════════════════════
⌗ Tags: #jeep #recon #jeep_recon
Medium
The 2026 Jeep Recon: A Jeep that lets you relive the Top Gear Botswana Special
Karminrots! Do you all remember Top Gear’s Botswana Special?
35 views
Daily Writeups
Forwarded from Bug Bounty Diary
✎ Extract & Download All JavaScript Files for Recon

For modern web apps, scraping <script> tags or relying on Burp's Site Map often isn't enough. Why? Because applications may dynamically load JavaScript from CDNs, cross-origin domains, specific routes (Lazy Loading), or after user interactions.

My Approach:
1. Open DevTools → Network
2. Enable Preserve log
3. Crawl the target and visit relevant pages/features
4. Interact with the application to trigger dynamic resources
5. Export the traffic as a HAR
6. Extract all JavaScript files from .HAR file using unhar (I'll talk about it in the next post.)

#bugbounty #javascript #recon
© t.iss.one/BugBounty_Diary
❤1
327 views
Daily Writeups
Forwarded from Bug Bounty Diary
✎ Unhar - Extract, Unminify, Beautify Javascript files from .Har file

In the previous post, I explained my approach to capturing and downloading a website’s JavaScript resources into a .HAR file for further local analysis. Now, let’s take it a step further with unhar and process that HAR files.

unhar turns a raw .HAR file into a structured set of web assets for local analysis. It extracts unique JavaScript and HTML resources while preserving the original URL structure, fetches available source maps, beautifies/unminifies JavaScript, and extracts inline scripts from HTML pages.

In short: HAR → Extract → Source Maps → Beautify → Ready for Analysis

● Installation
git clone https://github.com/Spix0r/unhar
cd unhar


● Usage
# custom output directory
python3 unhar.py site.har --output folder

# skip source map fetching
python3 unhar.py site.har --no-srcmap

# skip beautify
python3 unhar.py site.har --no-beautify


• Repository: Github

#bugbounty #javascript #recon
© t.iss.one/BugBounty_Diary
449 views
Daily Writeups
⤷ Title: The Subdomain Recon Chain: subfinder → httpx → dnsx
════════════════════════
𐀪 Author: Muneebahmedkhan
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 15:25:58 GMT
════════════════════════
⌗ Tags: #tutorial #recon #bug_bounty #cybersecurity #infosec
Medium
The Subdomain Recon Chain: subfinder → httpx → dnsx
Turn a root domain into a short list of live hosts worth testing. subfinder finds candidate hosts, httpx keeps the ones answering on HTTP…
17 views
Daily Writeups
⤷ Title: Managing Scan Results in Metasploit
════════════════════════
𐀪 Author: Ryan Ryan
════════════════════════
ⴵ Time: Fri, 21 Aug 2026 10:55:32 GMT
════════════════════════
⌗ Tags: #pentesting #penetration_testing #recon #red_team #metasploit
Medium
Managing Scan Results in Metasploit
In this post, let’s go through managing scan results using Metasploit’s database. Covering everything from setup, workspaces, importing…
21 views
Daily Writeups
⤷ Title: How to Configure Subfinder with API Keys for Better Passive Subdomain Enumeration
════════════════════════
𐀪 Author: MaMad
════════════════════════
ⴵ Time: Sun, 06 Sep 2026 01:53:14 GMT
════════════════════════
⌗ Tags: #reconnaissance #bug_bounty #bugbounty_tips #recon #subfinder
Medium
How to Configure Subfinder with API Keys for Better Passive Subdomain Enumeration
Subfinder is a passive subdomain enumeration tool developed by ProjectDiscovery.
49 views
Daily Writeups
⤷ Title: Regex for Hackers: Using Regex for Recon & Broken Validation
════════════════════════
𐀪 Author: default
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 12:40:10 GMT
════════════════════════
⌗ Tags: #hacker #bug_bounty #recon #regex #pentesting
Medium
Regex for Hackers: Using Regex for Recon & Broken Validation
In this blog, I won’t teach you how to write regular expressions from scratch. There are already plenty of great tutorials and resources…
33 views
Daily Writeups
⤷ Title: I Built a Recon Pipeline That Maps a Target Before I Touch It
════════════════════════
𐀪 Author: Dr.Michael
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #recon #programming #dns #technology #pipeline
Medium
I Built a Recon Pipeline That Maps a Target Before I Touch It
Combining DNS enumeration, certificate transparency, subdomain discovery, HTTP fingerprinting, and passive intelligence into a repeatable…
46 views
Daily Writeups
⤷ Title: Installing Nmap on Windows: A Quick Start Guide
════════════════════════
𐀪 Author: Harikishan
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 07:59:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #recon #windows #nmap #pentesting
Medium
Installing Nmap on Windows: A Quick Start Guide
Nmap (Network Mapper) is the industry-standard tool for network discovery and security scanning. Here’s how to get it running on Windows…
43 views
Daily Writeups
⤷ Title: Nmap Learning Series — Part 7: FIN, NULL & Xmas Scans
════════════════════════
𐀪 Author: Subrat Samantaray
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 16:12:58 GMT
════════════════════════
⌗ Tags: #reconnaissance #nmap #nmap_command #cybersecurity #recon
Medium
Nmap Learning Series — Part 7: FIN, NULL & Xmas Scans
Nmap is much more than simply running a SYN scan and looking for open ports.
46 views
Daily Writeups
⤷ Title: Your Attack Surface Is Telling a Story. Are You Paying Attention?
════════════════════════
𐀪 Author: Atanu Barua
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 04:55:05 GMT
════════════════════════
⌗ Tags: #mitre_attack #osint #recon #attack_surface_management
Medium
Your Attack Surface Is Telling a Story. Are You Paying Attention?
What a reconnaissance session taught me about OSINT, active recon, and the defender’s responsibility to control exposure.
41 views
Daily Writeups
⤷ Title: RECON-NG TOOL CHEETSHEET
════════════════════════
𐀪 Author: Navdip Bhajgotar
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 06:00:48 GMT
════════════════════════
⌗ Tags: #recon_ng #reconaissance #ethical_hacking #free_cybersecurity_tools #footprinting
Medium
RECON-NG TOOL CHEETSHEET
Hello, today i learned about recon-ng tool. recon-ng is powerfull tool often used for footprinting and Reconaissance tool.it helps security…
12 views
Daily Writeups
⤷ Title: One Random Search Led Me to Exposed PDFs During a Bug Bounty Hunt
════════════════════════
𐀪 Author: Mansi Shah
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 09:12:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #recon #cybersecurity #penetration_testing #bug_bounty_tips
Medium
One Random Search Led Me to Exposed PDFs During a Bug Bounty Hunt
Sometimes, the most interesting discoveries happen when you aren’t even looking for a specific vulnerability.
20 views