Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Apriti Sesamo — picoCTF Write-up | Finding a Hidden Backup and Bypassing SHA-1 Validation
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 08:28:44 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #cybersecurity #ctf #web_application_security
Medium
Apriti Sesamo — picoCTF Write-up | Finding a Hidden Backup and Bypassing SHA-1 Validation
Introduction
13 views
Daily Writeups
⤷ Title: SQL injection through PDF metadata
════════════════════════
𐀪 Author: Leonardo Spinelli
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 16:01:02 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #metadata #web_application_security
Medium
SQL injection through PDF metadata
Most SQL injection write-ups start with an input you can see: a form field, a URL parameter, a JSON body. This one uses something that…
46 views
Daily Writeups
⤷ Title: I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability |by Samadhan Shimple
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #web_application_security #api_security #cybersecurity
Medium
I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability |by Samadhan Shimple
How missing rate limits can turn an ordinary AI chat feature into a resource-consumption risk.
16 views
Daily Writeups
⤷ Title: I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability | Samadhan Shimple
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #web_application_security #api_security #cybersecurity
Medium
I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability |by Samadhan Shimple
How missing rate limits can turn an ordinary AI chat feature into a resource-consumption risk.
29 views
Daily Writeups
⤷ Title: I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability | by Samadhan Shimple
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #web_application_security #api_security #cybersecurity
Medium
I Tested an AI Chat API and Found a Missing Rate Limiting Vulnerability | by Samadhan Shimple
How missing rate limits can turn an ordinary AI chat feature into a resource-consumption risk.
56 views
Daily Writeups
⤷ Title: Web Application Security: How to Protect Websites from Cyber Threats in 2026
════════════════════════
𐀪 Author: QNAYDS Academy
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 05:57:04 GMT
════════════════════════
⌗ Tags: #web_application_security #web_security #qnayds_academy #ethical_hacking #cybersecurity
Medium
Web Application Security: How to Protect Websites from Cyber Threats in 2026
introduction
20 views
Daily Writeups
⤷ Title: Harmless Link Becomes RCE
════════════════════════
𐀪 Author: Bugatsec
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 08:00:46 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #bug_bounty_writeup #web_application_security #bug_bounty #cybersecurity
Medium
Harmless Link Becomes RCE
A web form that accepts a custom URI scheme looks like a low severity nuisance until you check whether the same product also ships a…
16 views
Daily Writeups
⤷ Title: The Attacker Doesn’t Need to Know Your Programming Language Anymore
════════════════════════
𐀪 Author: Suleyman Musayev
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:01:05 GMT
════════════════════════
⌗ Tags: #application_security #ruby_on_rails #cybersecurity #web_application_security #artificial_intelligence
Medium
The Attacker Doesn’t Need to Know Your Programming Language Anymore
LLMs did not make attackers smarter. They made them cheaper. What your front end has always told the world, and why reading it just got…
13 views
Daily Writeups
⤷ Title: Mimari Yanılgılar: APIM Key Sızıntısı ve Kısıtlanmamış JWT İle Zafiyet Zinciri (Vulnerability…
════════════════════════
𐀪 Author: Ali
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 16:39:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #responsible_disclosure #web_application_security #api_security
Medium
Mimari Yanılgılar: APIM Key Sızıntısı ve Kısıtlanmamış JWT İle Zafiyet Zinciri (Vulnerability Chaining)
Sorumlu Bildirim (Responsible Disclosure) Notu
40 views
Daily Writeups
⤷ Title: >> TryHackMe Psycho Break: What I Learned from This Cybersecurity Lab
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 05:17:49 GMT
════════════════════════
⌗ Tags: #tryhackme #application_security #web_application_security #cybersecurity
Medium
>> TryHackMe Psycho Break: What I Learned from This Cybersecurity Lab
Cybersecurity is not just about knowing tools — it is about understanding how systems work, identifying weaknesses, and thinking critically…
38 views
Daily Writeups
⤷ Title: OWASP Juice Shop Write-Up: How a Name Led to an Account Takeover
════════════════════════
𐀪 Author: burak genç
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 08:51:58 GMT
════════════════════════
⌗ Tags: #web_application_security #penetration_testing #broken_authentication #account_takeover #osint
Medium
OWASP Juice Shop Write-Up: How a Name Led to an Account Takeover
Challenge: Bjoern’s Favorite Pet | Difficulty: ⭐⭐⭐ | Focus: OSINT & Broken Authentication
25 views
Daily Writeups
⤷ Title: TATA Group Security Research Discovering a Hardcoded AES Key
════════════════════════
𐀪 Author: 0x7ipher
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 05:14:01 GMT
════════════════════════
⌗ Tags: #application_security #cryptography #cybersecurity #vulnerability_disclosure #web_application_security
Medium
TATA Group Security Research Discovering a Hardcoded AES Key
Security research study on the ease at which cryptography keys could be utilized to convert ciphertext passwords to plaintext passwords.
21 views
Daily Writeups
⤷ Title: Injectics Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Gowrishankar
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 16:36:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #ctf_writeup #penetration_testing #web_application_security
Medium
Injectics Walkthrough | TryHackMe
Use your injection skills to take control of a web app.
23 views
Daily Writeups
⤷ Title: >> IDOR vs BOLA: Understanding Broken Object-Level Authorization in Web Applications and APIs
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 13:32:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_application_security #cybersecurity
Medium
>> IDOR vs BOLA: Understanding Broken Object-Level Authorization in Web Applications and APIs
In web application security, some vulnerabilities don’t require complicated payloads or sophisticated exploitation techniques. Sometimes, a…
40 views
Daily Writeups
⤷ Title: Practical Ethical Hacking Training in Kerala: How Students Can Learn Web Application Security in…
════════════════════════
𐀪 Author: QNAYDS Academy
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 05:35:57 GMT
════════════════════════
⌗ Tags: #qnayds_academy #cybersecurity #kerala #ethical_hacking #web_application_security
Medium
Practical Ethical Hacking Training in Kerala: How Students Can Learn Web Application Security in 2026
As businesses increasingly depend on websites and web applications, protecting digital systems has become an important part of…
27 views
Daily Writeups
⤷ Title: A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
════════════════════════
𐀪 Author: Bhargav Buddh
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:50:11 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #information_security #hacking #web_application_security
Medium
A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
Investigating suspicious activity, unexpected external links, and hidden SEO spam in a WordPress website.
7 views
Daily Writeups
⤷ Title: bWAPP: Forgotten Function (Password Reset Secret Disclosure)
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 19:16:30 GMT
════════════════════════
⌗ Tags: #owasp #information_security #ethical_hacking #ciso #web_application_security
Medium
bWAPP: Forgotten Function (Password Reset Secret Disclosure)
Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth: Forgotten Function Category: Broken Authentication /…
34 views
Daily Writeups
⤷ Title: Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and…
════════════════════════
𐀪 Author: Jamila Sallem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:58:32 GMT
════════════════════════
⌗ Tags: #web_application_security #tryhackme #security #php2shell #php
Medium
Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and CVE-2026–109619)
I just finished the TryHackMe room on PHP2Shell, and this is what I learned:
26 views
Daily Writeups
⤷ Title: bWAPP — Password Attacks (Dynamic Token Defeats Standard Brute Force Tools)
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 14:47:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_application_security #penetration_testing #information_security #ethical_hacking
Medium
bWAPP — Password Attacks (Dynamic Token Defeats Standard Brute Force Tools)
Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth, Password Attacks Category: Broken Authentication /…
12 views
Daily Writeups
⤷ Title: API Security in Layers: Why Signature Filtering Misses BOLA
════════════════════════
𐀪 Author: Kazem Mortazavi
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #web_application_security #information_security #api_security
Medium
API Security in Layers: Why Signature Filtering Misses BOLA
Picture an organization with a WAF, a valid TLS certificate and a yearly penetration test that still finds its customer data on a public…
42 views