Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: I Found a Hidden Signup Page… and Chained 3 Bugs to Become a Super Admin ($5,000–$10,000)
════════════════════════
𐀪 Author: Abin
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 16:18:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #web_penetration_testing #broken_access_control
Medium
I Found a Hidden Signup Page… and Chained 3 Bugs to Become a Super Admin
Impact — Critical
15 views
Daily Writeups
⤷ Title: My First Paid Bug Bounty: A Broken Access Control Vulnerability
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 08:44:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #bug_bounty_writeup #hacking #cybersecurity
Medium
My First Paid Bug Bounty: A Broken Access Control Vulnerability
Introduction
18 views
Daily Writeups
⤷ Title: How I Got Regular Users to Bypass Admin Approval and Accept Live Shares (Broken Access Control) —…
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 05:15:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #cybersecurity
Medium
How I Got Regular Users to Bypass Admin Approval and Accept Live Shares (Broken Access Control) —…
A writeup of a Broken Access Control / Privilege Escalation bug I found and got rewarded for. Target is referred to as `redacted.com` since…
46 views
Daily Writeups
⤷ Title: The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:51:01 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty #cybersecurity #broken_access_control #infosec
Medium
The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
Sometimes the most convincing proof that a leak matters isn’t your own argument — it’s the target’s own code, contradicting itself.
38 views
Daily Writeups
⤷ Title: Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:49:42 GMT
════════════════════════
⌗ Tags: #session_expiration #improper_authentication #bug_bounty #broken_session_revocation
Medium
Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
CWE-613: Insufficient Session Expiration CWE-287: Improper Authentication CVSS 3.1: 8.1 (High) — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
18 views
Daily Writeups
⤷ Title: How I found an internal compliance document in client-side code
════════════════════════
𐀪 Author: Atindra Girish
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 15:35:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #owasp_top_10 #broken_access_control #owasp
Medium
How I found an internal compliance document in client-side code
Lynko VDP Writeup
13 views
Daily Writeups
⤷ Title: Power Cookie — picoCTF Write-up | Privilege Escalation Through Cookie Manipulation
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 05:07:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ctf_writeup #web_security #broken_access_control
Medium
Power Cookie — picoCTF Write-up | Privilege Escalation Through Cookie Manipulation
Introduction
28 views
Daily Writeups
⤷ Title: From Admin to Owner: How I Discovered a Critical Full Organization Takeover
════════════════════════
𐀪 Author: Ankit Rathva aka Gujarati Hacker
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 06:13:53 GMT
════════════════════════
⌗ Tags: #broken_access_control #hackerone #privilege_escalation #bug_bounty #bug_bounty_writeup
Medium
From Admin to Owner: How I Discovered a Critical Full Organization Takeover
Summary
11 views
Daily Writeups
⤷ Title: BAC to Full Takeover: How I Escalated Privileges and Kicked Out the Real Owner
════════════════════════
𐀪 Author: MD Mainul Islam Siam
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 18:05:35 GMT
════════════════════════
⌗ Tags: #web_security #broken_access_control #cybersecurity #bug_bounty #privilege_escalation
Medium
BAC to Full Takeover: How I Escalated Privileges and Kicked Out the Real Owner💥
👨‍💻 Meet the Author
26 views
Daily Writeups
⤷ Title: Broken Access Control OWASP Top 10 (2025): The #1 Web Security Risk
════════════════════════
𐀪 Author: Shruti Vijay Shinde
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 16:43:53 GMT
════════════════════════
⌗ Tags: #web_security_testing #owasp_top_10 #broken_access_control #bug_bounty #cybersecurity
Medium
Broken Access Control OWASP Top 10 (2025): The #1 Web Security Risk
Hey everyone! 👋
19 views
Daily Writeups
⤷ Title: It Returned 404… But the Data Was Still There
════════════════════════
𐀪 Author: Hamdyosama
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 22:51:49 GMT
════════════════════════
⌗ Tags: #authentication_bypass #bug_bounty #broken_access_control #404_page #hacker
Medium
It Returned 404… But the Data Was Still There
Hello Hacker👋
16 views
Daily Writeups
⤷ Title: Web Security Lab — Exploiting an API Endpoint Using Documentation | PortSwigger Apprentice
════════════════════════
𐀪 Author: Khushbu
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 10:29:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #portswigger #broken_access_control #web_security
Medium
Web Security Lab — Exploiting an API Endpoint Using Documentation | PortSwigger Apprentice
I didn’t find a vulnerability in the API. I found the API’s own instruction manual, sitting at a URL nobody had bothered to hide, and it…
52 views
Daily Writeups
⤷ Title: It Returned 404… But the Data Was Still There
════════════════════════
𐀪 Author: Hamdyosama
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 21:40:49 GMT
════════════════════════
⌗ Tags: #hacker #broken_access_control #authentication_bypass #bug_bounty #404_page
Medium
It Returned 404… But the Data Was Still There
Hello Hacker👋
46 views
Daily Writeups
⤷ Title: One GraphQL Mutation Let Me Change Another User’s Alert Settings
════════════════════════
𐀪 Author: Nourammar
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 12:13:28 GMT
════════════════════════
⌗ Tags: #idor #graphql #bug_bounty #cybersecurity #broken_access_control
Medium
One GraphQL Mutation Let Me Change Another User’s Alert Settings
A Broken Access Control vulnerability where changing a single userId allowed an authenticated user to modify another user’s notification…
20 views
Daily Writeups
⤷ Title: Broken Access Control OWASP Top 10 (2025): A Practical Checklist (Part 2)
════════════════════════
𐀪 Author: Shruti Vijay Shinde
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 06:16:33 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #owasp_top_10 #broken_access_control
Medium
Broken Access Control OWASP Top 10 (2025): A Practical Checklist (Part 2)
Hey everyone! 👋
26 views
Daily Writeups
⤷ Title: Critical BAC: IDOR + Weak Appointment Code Enables Unauthorized Appointment Cancellation…
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 13:17:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #idor #broken_access_control #pii_exposure
Medium
Critical BAC: IDOR + Weak Appointment Code Enables Unauthorized Appointment Cancellation, Modification and PII Disclosure.
While testing a public-facing pre-complaint system, I discovered a critical Broken Access Control (BAC) issue involving appointment…
23 views
Daily Writeups
⤷ Title: Broken Access Control in a Cloud API: How One Missing Check Leaked a Secret (CTF Walkthrough)
════════════════════════
𐀪 Author: Sheikh Mujtaba (Mujtaba Javed)
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 12:49:15 GMT
════════════════════════
⌗ Tags: #api_security #ctf #cybersecurity #owasp #broken_access_control
Medium
Broken Access Control in a Cloud API: How One Missing Check Leaked a Secret (CTF Walkthrough)
A beginner-friendly look at IDOR — how an API that trusts the wrong thing hands you data you were never meant to see, and how to stop it.
30 views
Daily Writeups
⤷ Title: OWASP Juice Shop Write-Up: How a Name Led to an Account Takeover
════════════════════════
𐀪 Author: burak genç
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:51:58 GMT
════════════════════════
⌗ Tags: #web_application_security #penetration_testing #broken_authentication #account_takeover #osint
Medium
OWASP Juice Shop Write-Up: How a Name Led to an Account Takeover
Challenge: Bjoern’s Favorite Pet | Difficulty: ⭐⭐⭐ | Focus: OSINT & Broken Authentication
28 views
Daily Writeups
⤷ Title: Broken Access Control: I Deleted a User Without Logging In (OWASP Top 10 #1)
════════════════════════
𐀪 Author: Zahid Hussain Shah
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 04:29:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #access_control #web_hacking #broken_access_control
Medium
Broken Access Control: I Deleted a User Without Logging In (OWASP Top 10 #1)
Part 1 of my OWASP Top 10 series — explained for beginners, with a live hands-on lab.
35 views
Daily Writeups
⤷ Title: One Email Parameter Was All It Took: How Broken Access Control Let Me Create a Folder in Another…
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 11:52:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #broken_access_control #penetration_testing #idor_vulnerability #bug_bounty
Medium
One Email Parameter Was All It Took: How Broken Access Control Let Me Create a Folder in Another User’s Account | by Samadhan Shimple
A practical bug bounty story about testing authorization, manipulating request parameters, and finding a potential IDOR vulnerability.
21 views