Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:41:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #application_security #penetration_testing
Medium
🔪🧬🔓💥 HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
The bug class scanners love to “detect” and almost never prove — and why 2025 quietly made it deadlier than it has ever been.
12 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:21:20 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_architecture #enterprise_architecture #cloud_security
Medium
Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and the PMO-Meets-ADM Engine
Part 3 of 3 in the series “Security Requirements That Actually Work”
10 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:19:36 GMT
════════════════════════
⌗ Tags: #enterprise_architecture #software_architecture #application_security #cloud_security #cybersecurity
Medium
Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
Part 2 of 3 in the series “Security Requirements That Actually Work”
12 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:16:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #enterprise_architecture #software_architecture #application_security
Medium
Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security Requirement
Part 1 of 3 in the series “Security Requirements That Actually Work”
10 views
Daily Writeups
⤷ Title: From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
════════════════════════
𐀪 Author: cyb3rD1vvy@
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 06:27:14 GMT
════════════════════════
⌗ Tags: #application_security #ethical_hacking #cybersecurity #bug_bounty_writeup #web_security
Medium
From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
Series: From P4 to P1: The Bug Hunter’s Journey Day: 01/30 Topic: P4 Findings, Manual Validation, and Report Quality
19 views
Daily Writeups
⤷ Title: AI Coding Agents Pass Tests, Not Security Checks
════════════════════════
𐀪 Author: Emre Gültekir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:09:03 GMT
════════════════════════
⌗ Tags: #programming #application_security #artificial_intelligence #ai_agent #software_testing
Medium
A Green Test Only Answers the Question You Asked
Coding agents pass up to 91% of functional tests but only 25% are also secure. Why green tests miss this and how to put attacks in the spec.
19 views
Daily Writeups
⤷ Title: I Removed the CAPTCHA. Could Customers Still Get Through?
════════════════════════
𐀪 Author: Tinguyen
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 15:01:04 GMT
════════════════════════
⌗ Tags: #web_development #software_engineering #application_security #accessibility
Medium
I Removed the CAPTCHA. Could Customers Still Get Through?
A hidden field can catch spam. The harder part is knowing whose request never reached you.
19 views
Daily Writeups
⤷ Title: PHP2Shell: The Security Engineering Lessons We Shouldn’t Have to Learn Twice
════════════════════════
𐀪 Author: Chibuikem Ndubuisi
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 14:57:31 GMT
════════════════════════
⌗ Tags: #information_security #application_security #cybersecurity #vulnerability #web_security
Medium
PHP2Shell: The Security Engineering Lessons We Shouldn’t Have to Learn Twice
From vulnerability discovery to continuous improvement: a practical security engineering lifecycle inspired by the lessons of PHP2Shell.
14 views
Daily Writeups
⤷ Title: The Brotli Bug CVE-2026-111497, Explained
════════════════════════
𐀪 Author: SAHIL SHARMA
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:09:11 GMT
════════════════════════
⌗ Tags: #web_development #nodejs #cybersecurity #application_security #programming
Medium
The Brotli Bug CVE-2026-111497, Explained
How an invalid block switch led to memory corruption, and what the patch changes.
33 views
Daily Writeups
⤷ Title: PHP’s Memory Bugs, Explained
════════════════════════
𐀪 Author: SAHIL SHARMA
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:07:26 GMT
════════════════════════
⌗ Tags: #php #web_development #application_security #programming #cybersecurity
Medium
PHP’s Memory Bugs, Explained
Two memory bugs, the fixes, and what developers should update.
24 views
Daily Writeups
⤷ Title: Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:45:40 GMT
════════════════════════
⌗ Tags: #application_security #spring_security #access_control #authorization #attribute_based_access
Medium
Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
Modül V — Authorization Modelleri
29 views
Daily Writeups
⤷ Title: I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
Medium
I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
In the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…
21 views
Daily Writeups
⤷ Title: What Are We Actually Calling Secure? Lessons From PHP2Shell
════════════════════════
𐀪 Author: Myojin Research
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 04:12:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #application_security #artificial_intelligence #php
Medium
What Are We Actually Calling Secure? Lessons From PHP2Shell
Before declaring a system safe, ethical hackers should ask a different question: What assumptions make that judgment possible?
20 views
Daily Writeups
⤷ Title: PHP2Shell: Critical PHP Vulnerabilities Could Enable Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Sushant Bhardwaj
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 03:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #application_security #php #vulnerability
Medium
PHP2Shell: Critical PHP Vulnerabilities Could Enable Unauthenticated Remote Code Execution
Understanding CVE-2026–109618 and CVE-2026–109619, the underlying memory-safety issues, real-world risks, and what defenders should do now.
20 views
Daily Writeups
⤷ Title: The Surface Security Index (Q3 2026): what 284 external checks reveal
════════════════════════
𐀪 Author: Secvura
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #tech #application_security #web_development #cybersecurity #startup
Medium
The Surface Security Index (Q3 2026): what 284 external checks reveal
Every company that runs our free Surface Check gets an A to F grade for the part of their security that faces the public internet. We have…
14 views
Daily Writeups
⤷ Title: PHP Discloses CVE-2026-115560 Session Deserialization Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #application security #CVE_2026_115560 #PHP #remote code execution #vulnerability
Information Security News
PHP Discloses CVE-2026-115560 Session Deserialization Flaw
The PHP Foundation recently published a security disclosure detailing a remote code execution risk. Specifically, maintainers registered the issue as CVE-2026-115560 across national vulnerability …
23 views
Daily Writeups
⤷ Title: Web LLM Attacks: Turning a Chatbot’s “Helpfulness” Into Account Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:08:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #application_security #penetration_testing
Medium
🤖💉🔓💥 Web LLM Attacks: Turning a Chatbot’s “Helpfulness” Into Account Takeover
The AI assistant isn’t the target — it’s the confused deputy you weaponize against everything sitting behind it.
13 views
Daily Writeups
⤷ Title: Black Box, Grey Box or White Box? Choosing the Right Pen Test for Each System
════════════════════════
𐀪 Author: Affixcenter
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 11:41:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #penetration_testing
Medium
Black Box, Grey Box or White Box? Choosing the Right Pen Test for Each System
When a company asks for “a pen test”, the provider has to make a choice the buyer rarely sees: how much the testers are allowed to know…
18 views
Daily Writeups
⤷ Title: Deploy IaC securely
════════════════════════
𐀪 Author: Ala Alhaj
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 15:40:23 GMT
════════════════════════
⌗ Tags: #iac #security #aws #golang #application_security
Medium
Deploy IaC securely
One of the amazing technical stack that any software engineer usually knows is Infrastructure as Code “IaC” with this powerful it comes…
8 views
Daily Writeups
⤷ Title: PHP Under Attack: The Critical Vulnerabilities Every Web Developer Should Know About in 2026
════════════════════════
𐀪 Author: Hadiamahmood
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 17:55:45 GMT
════════════════════════
⌗ Tags: #vulnerability_management #cybersecurity #php #application_security #web_security
Medium
PHP Under Attack: The Critical Vulnerabilities Every Web Developer Should Know About in 2026
Two critical PHP vulnerabilities have put web servers at risk of remote code execution. Here’s what happened, why it matters, and what…
17 views