Daily Writeups

⤷ Title: I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes
════════════════════════
𐀪 Author: Foysal Hossain, Senior Consultant @EY
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:01:09 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #pentesting #android_pentesting #penetration_testing #bug_hunting

Medium

I Got a Critical Vulnerability in a Popular Social Media App Within 5 Minutes

Five minutes. That’s all it took between opening a rooted Android device for the first time and sitting on a Critical severity finding in a…

11 views13:06

Daily Writeups

⤷ Title: No Click, No Login: A Reflected DOM XSS in a Documentation Search Box
════════════════════════
𐀪 Author: ForgetMeNot
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 01:55:50 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #xs #pentesting

Medium

No Click, No Login: A Reflected DOM XSS in a Documentation Search Box

“A static docs site, a search-index tokeniser and one obscure DOM event turned a single link into arbitrary JavaScript in the target’s own…

27 views03:04

Daily Writeups

⤷ Title: PHP2Shell — Complete Web Pentester Reference
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:11:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #php2shell #pentesting #ethical_hacking

Medium

PHP2Shell — Complete Web Pentester Reference

Last reviewed: October 22, 2026 Vulnerabilities: CVE-2026-109618 and CVE-2026-109619 Perspective: Web Pentesting, Vulnerability Research…

29 views11:04

Daily Writeups

⤷ Title: Security Write-Up: Authentication Bypass via Response Manipulation on Email Change Feature
════════════════════════
𐀪 Author: Yousef
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:22:40 GMT
════════════════════════
⌗ Tags: #hackerone #pentesting #business_logic_flaw #bug_bounty #cybersecurity

Medium

Security Write-Up: Authentication Bypass via Response Manipulation on Email Change Feature

“وَمَا تَوْفِيقِي إِلَّا بِاللَّهِ ۚ عَلَيْهِ تَوَكَّلْتُ وَإِلَيْهِ أُنِيبُ”

19 views17:04

Daily Writeups

⤷ Title: Pwned by 007: A Beginner’s Guide to the TryHackMe GoldenEye CTF
════════════════════════
𐀪 Author: David Wairimu
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:32:41 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking

Medium

Pwned by 007: A Beginner’s Guide to the TryHackMe GoldenEye CTF

If you’re looking to test your enumeration skills, pivot through different services, and tackle a classic Linux kernel privilege…

19 views17:06

Daily Writeups

Medium

Security Write-Up: Authentication Bypass via Response Manipulation on Email Change Feature

“وَمَا تَوْفِيقِي إِلَّا بِاللَّهِ ۚ عَلَيْهِ تَوَكَّلْتُ وَإِلَيْهِ أُنِيبُ”

6 views19:05

Daily Writeups

Medium

Pwned by 007: A Beginner’s Guide to the TryHackMe GoldenEye CTF

If you’re looking to test your enumeration skills, pivot through different services, and tackle a classic Linux kernel privilege…

8 views19:07

Daily Writeups

⤷ Title: OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
════════════════════════
𐀪 Author: Mohammed Salah Khaleel
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #oscp #offsec #hacking #pentesting #cybersecurity

Medium

OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned

I had 8 hours left and only needed one more flag. I gave up. I still don’t know why.

11 views09:05

Daily Writeups

⤷ Title: Introduction to Active Directory: What Every Pentester Needs to Know First
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:50 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #pentesting #networking #active_directory

Medium

Introduction to Active Directory: What Every Pentester Needs to Know First

Walk into almost any internal penetration test and you’ll find the same thing running the show: Active Directory. It’s the system deciding…

15 views09:05

Daily Writeups

⤷ Title: bWAPP, Logout Management (Session Invalidation Failure)
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:19:01 GMT
════════════════════════
⌗ Tags: #web_security #information_security #bug_bounty #pentesting #cybersecurity

Medium

bWAPP, Logout Management (Session Invalidation Failure)

Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth, Logout Management Category: Broken Authentication /…

12 views13:04

Daily Writeups

⤷ Title: TryHackMe — Domino
════════════════════════
𐀪 Author: S4F4L
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:23:33 GMT
════════════════════════
⌗ Tags: #privilege_escalation #rce_vulnerability #pentesting #remote_file_inclusion #brute_force_attack

Medium

TryHackMe — Domino

Challenge Link: https://tryhackme.com/room/domino

38 views13:05

Daily Writeups

⤷ Title: TryHackMe Include: From BOPLA to LFI and RCE
════════════════════════
𐀪 Author: Ziyad Walid [ziy4d0x]
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:36:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_writeup #pentesting #hacking #bugbounty_writeup

Medium

TryHackMe Include: From BOPLA to LFI and RCE

Introduction

16 views19:04

Daily Writeups

⤷ Title: The Ultimate Guide to SSRF: Hunting, Bypassing and Exploiting in Modern Bug Bounty
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:43:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #pentesting #bug_bounty #technology

Medium

The Ultimate Guide to SSRF: Hunting, Bypassing and Exploiting in Modern Bug Bounty

A complete, hands-on guide to hunting hidden SSRF vulnerabilities, bypassing WAFs and filters and escalating impact from cloud metadata…

17 views03:03

Daily Writeups

⤷ Title: What a Real WiFi Hack Actually Looks Like (Spoiler: It’s Not One Move)
════════════════════════
𐀪 Author: Krithick
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 05:07:31 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #cybersecurity #wifihacking #networking

Medium

What a Real WiFi Hack Actually Looks Like (Spoiler: It’s Not One Move) 📡

You’ve seen the movie scene. Hacker types fast, green text scrolls, password cracked in ten seconds flat. 🎬

13 views07:04

Daily Writeups

⤷ Title: Active Directory Part 2: Advanced Attacks Every Pentester Should Know
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 10:57:55 GMT
════════════════════════
⌗ Tags: #kali_linux #pentesting #active_directory #hacking #networking

Medium

Active Directory Part 2: Advanced Attacks Every Pentester Should Know

Part 1 covered the foundation — what AD is, how it’s structured, and the basic recon that gets you in the door. This post picks up where…

28 views11:04

Daily Writeups

⤷ Title: From P4 to P1 — Day 2: Technology and Server Version Disclosure in Bug Bounty Hunting
════════════════════════
𐀪 Author: cyb3rD1vvy@
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 06:23:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_applications #pentesting

Medium

From P4 to P1 — Day 2: Technology and Server Version Disclosure in Bug Bounty Hunting

Series: From P4 to P1: The Bug Hunter’s Journey Day: 02/30 Topic: Technology Fingerprinting, Manual Validation, and Risk Assessment

34 views07:03

Daily Writeups

⤷ Title: How I Use AI to Find Potential IDOR Vulnerabilities: A Practical 6-Step Guide | by Samadhan Shimple
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 13:43:36 GMT
════════════════════════
⌗ Tags: #idor_vulnerability #ai #bug_bounty #cybersecurity #pentesting

Medium

How I Use AI to Find Potential IDOR Vulnerabilities: A Practical 6-Step Guide | by Samadhan Shimple

Finding an IDOR vulnerability is not always as simple as changing a number in a URL.

19 views15:04

Daily Writeups

⤷ Title: Basic Pentesting — THM — Writeup
════════════════════════
𐀪 Author: ZODiAK
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 20:07:34 GMT
════════════════════════
⌗ Tags: #pentesting #tryhackme_walkthrough #hacker #tryhackme #cybersecurity

Medium

Basic Pentesting — THM — Writeup

whoami : ZODiAK LabName : Basic Pentesting Platform : TryHackMe Difficulty: Easy Day : 4

22 views21:04

Daily Writeups

⤷ Title: How Path Traversal Turns a Filename Into a Foothold
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 21:44:30 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #web_development #hacking #pentesting

Medium

How Path Traversal Turns a Filename Into a Foothold

Path traversal is one of those bugs that sounds simple until you realise what it actually means: an attacker can read your.env, your source…

16 views23:03

Daily Writeups

⤷ Title: Dev Vuln VM pentest walkthrough
════════════════════════
𐀪 Author: Anthony Kendall
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 02:53:44 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #cybersecurity #cyber_security_awareness #ctf_writeup

Medium

Dev Vuln VM pentest walkthrough

Disclaimer — Do not try this on a system you are not authorized to test on as you could get into legal trouble. Never do what I show you on…

8 views03:04

About

Blog

Apps

Platform