Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: How to Build a Web App Security Testing Program That Actually Holds
════════════════════════
𐀪 Author: Invadel
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 13:34:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #application_security #devsecops #web_security
Medium
How to Build a Web App Security Testing Program That Actually Holds
A practitioner’s walk through SAST, DAST, manual pentesting and the OWASP checklist, and how to layer them so gaps don’t line up.
12 views
Daily Writeups
⤷ Title: OWASP Top 10 for LLM Applications — Revised Write-up
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 17:50:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #llm #web_security #prompt_injection_attack
Medium
OWASP Top 10 for LLM Applications — Revised Write-up
Introduction
12 views
Daily Writeups
⤷ Title: TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:31:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102989 #npm #React #Reflected XSS #TanStack #TanStack Start #Web Security
Daily CyberSecurity
TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
TL;DR TanStack has fixed CVE-2026-102989, an unauthenticated reflected XSS flaw rated CVSS 9.3. This TanStack Start vulnerability lets a crafted link run attacker JavaScript on an app’s own …
15 views
Daily Writeups
⤷ Title: Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:01:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #web_security #sqli #cybersecurity
Medium
Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
Introduction
10 views
Daily Writeups
⤷ Title: The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
════════════════════════
𐀪 Author: Nikhilvarun
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 10:50:02 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp_top_10 #access_control
Medium
The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
Websites get hacked every day, and most of the time it’s not some Hollywood genius. It’s a basic mistake: a missing permission check, a…
24 views
Daily Writeups
⤷ Title: Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
════════════════════════
𐀪 Author: Vivek Yadav
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #authentication_bypass #web_security #ethical_hacking
Medium
Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
If you’re going through PortSwigger’s Web Security Academy, the “SQL injection vulnerability allowing login bypass” lab is one of the first…
31 views
Daily Writeups
⤷ Title: Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:43:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing
Medium
Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
Unveiling the Risks of Client-Side Encryption: Insights and Remediation
15 views
Daily Writeups
⤷ Title: Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
Medium
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
Your JavaScript Has a Secret. Let’s Find Out What It Is.
12 views
Daily Writeups
⤷ Title: Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 04:55:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_96889 #Next.js #React #Remote Code Execution #shARP #Vercel #Web Security
Daily CyberSecurity
Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
TL;DR Vercel shipped Next.js 16.4.1 and 15.5.28 on October 14, 2026, in an out-of-band release. The Next.js security update fixes two critical unauthenticated remote code execution flaws and one h…
26 views
Daily Writeups
⤷ Title: >> SOC Analyst: How Blue Team Operations Help Detect and Respond to Cyber Threats
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 05:36:35 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security
Medium
>> SOC Analyst: How Blue Team Operations Help Detect and Respond to Cyber Threats
Cybersecurity is not only about finding vulnerabilities and exploiting weaknesses. It is also about detecting attacks, investigating…
14 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:23:45 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #infosec #portswigger #cybersecurity
Medium
PortSwigger Lab: SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data
Difficulty: Apprentice
18 views
Daily Writeups
⤷ Title: From Script to Shell: Mastering File Upload Exploits Across Security Levels
════════════════════════
𐀪 Author: Thana Binshibl
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:17:46 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #rce_vulnerability #penetration_testing #file_upload_vulnerability
Medium
From Script to Shell: Mastering File Upload Exploits Across Security Levels
File upload vulnerabilities are among the most critical security flaws in web applications. When an application allows users to upload…
21 views
Daily Writeups
⤷ Title: Frontend ↔ Backend Communication: A Security-Focused Guide
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:01:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #api_security #web_security
Medium
Frontend ↔ Backend Communication: A Security-Focused Guide
A practical reference for Web Pentesting and Bug Bounty Hunting
15 views
Daily Writeups
⤷ Title: GET vs POST: Which One Is Actually Safer for Sensitive Data?
════════════════════════
𐀪 Author: Haroon Shahid
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 10:27:51 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security #https #penetration_testing
Medium
GET vs POST: Which One Is Actually Safer for Sensitive Data?
Two HTTP methods. One common misconception. And a security difference that’s easy to misunderstand.
25 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column (Manual)
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:01 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #cybersecurity #portswigger #infosec
Medium
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column Difficulty: Practitioner Target: PortSwigger Web Security Academy Objective The objective of this lab is to …
15 views
Daily Writeups
⤷ Title: How I Found SSRF in 6 Known Companies Using One Methodology in 2026
════════════════════════
𐀪 Author: Shawkatemad
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:28:09 GMT
════════════════════════
⌗ Tags: #hacking #programming #web_security #cybersecurity #bug_bounty
Medium
How I Found SSRF in 6 Known Companies Using One Methodology in 2026
Bug Bounty SSRF Web Security Methodology Kubernetes
13 views
Daily Writeups
⤷ Title: A 666 EUR box for 66 EUR
════════════════════════
𐀪 Author: Krishna_Jonnagaddala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:36:06 GMT
════════════════════════
⌗ Tags: #ctf #web_security #intigriti #cybersecurity #bug_bounty
Medium
A 666 EUR box for 66 EUR
How Intigriti’s October 2026 challenge disguised a one-line coupon bug as an HTTP smuggling puzzle.
14 views
Daily Writeups
⤷ Title: I Found an Open Admin Panel on the UP Ground Water Department Portal
════════════════════════
𐀪 Author: Siddharth
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:25:11 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #web_security #bug_bounty #ethical_hacking
Medium
I Found an Open Admin Panel on the UP Ground Water Department Portal
A robots.txt entry led me there. The page opened without an admin login.
12 views
Daily Writeups
⤷ Title: Redirect Run: Leaking Secrets in a 302 Response Body
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:04:37 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty #ethical_hacking #web_security #cybersecurity
Medium
Redirect Run: Leaking Secrets in a 302 Response Body
https://795b9a6c-6357-redirect-run-718d5.challenges.webverselabs-pro.com/
13 views
Daily Writeups
⤷ Title: SQL Injection Hands-On: UNION, Blind, and Error-Based Attacks
════════════════════════
𐀪 Author: Loay Essam
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 22:47:04 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity
Medium
SQL Injection Hands-On: UNION, Blind, and Error-Based Attacks
SQL injection is one of the oldest and most dangerous web vulnerabilities, and it is still everywhere. In this writeup I walk through four…
108 views