Writeup DB | Read More, Learn More!

#writeup #bugbounty #CVE #WDB #infosec #infosecurity #cybersecurity

[Gynvael Coldwind @gynvael]

We've reached a huge milestone in terms of Paged Out! prints - they are now available in the first online bookstore with global shipping:
https://t.co/I3tuv0vkIZ
There are 4 versions there - a normal one and 3 "sponsorship" ones if you want to donate a bit more to the project.

[Writeup DB | Read More, Learn More! @writeup_db]

@zhyar11010 @ved4vyasan I guess you are right. take a look at https://t.co/nCdGccyftk and my comment.

[Vedavyasan S @ved4vyasan]

🔥 SQL Injection Day! 🔥

💻 Found 7+ SQLi vulnerabilities in VDP programs

🚨 SQLi is still alive

🌐 Bug hunting life never sleeps. 🕵️‍♂️💥

#BugBounty #bugbountytips #bugbountytip #CyberSecurity #hackers #hackerone #HackerNews #infosecurity #Hacking

[Writeup DB | Read More, Learn More! @writeup_db]

I don’t get why bug hunters post screenshots with sensitive data if they’re not sharing the target's name or details. In your screenshot, the database name 'horizon1_beta' is still visible, suggesting it’s a beta (non-production) database, possibly from a CTF, not a real program (I could be wrong).

Suggestions:
- Share your commands or payloads instead of sensitive data.
- Add a brief explanation to educate your audience.

[Writeup DB | Read More, Learn More! @writeup_db]

Which is the Best Web Fuzzer for CTF and Bug Bounty?

👀 Vote and Comment if I missed any favourites, and tell us why you think your choice stands out.
#Cybersecurity #BugBounty #CTF #WebFuzzer #GameChanger #infosec #cybersec #pool #gobuster #ffuf #dirsearch #dirbuster

[Writeup DB | Read More, Learn More! @writeup_db]

Honestly, I don’t think this qualifies as a true writeup.
- To me, it feels more like a clickbait technique to gain followers.
- You’ve only shared one or two payloads for SQL injection, without offering any meaningful insights or valuable information. A real writeup should dive into your approach, the exploitation process, your thought process, and step-by-step methodology.
Instead, this article focuses too much on a single payload.
- People aren’t here to learn about your earnings -they’re here to gain knowledge from the experiences and insights you share. (No offense intended.)

[Writeup DB | Read More, Learn More! @writeup_db]

🚨 Top 10 Programming Languages for Cybersecurity Professionals in 2024 🚨

Are you ready to upskill for the evolving cybersecurity landscape? 🛡️ One of the most important skills you can have as a cybersecurity professional is programming. From vulnerability assessments to building robust security solutions, mastering the right coding languages will sharpen your ability to tackle even the most complex cyber threats. 💻🔐

In our latest blog, we break down the Top 10 Programming Languages you need in 2024:

1️⃣ Python
2️⃣ C
3️⃣ C++
4️⃣ JavaScript
5️⃣ Bash
6️⃣ PowerShell
7️⃣ Ruby
8️⃣ SQL
9️⃣ PHP
🔟 Go (Golang)

📖 Discover how each language can strengthen your cybersecurity skillset. Ready to dive in? Check out the full post and stay ahead of the curve!
https://t.co/SfxUDhHYCX

#infosecurity #infosec #developers #programmer #cybersecurity #CybersecurityAwarenessMonth

[Writeup DB | Read More, Learn More! @writeup_db]

🚨 Top 5 XSS (Cross-Site Scripting) Scanners in 2024

🔍 Cross-site scripting (XSS) remains a top security concern for web applications, making it essential to have the right tools for detection and mitigation. 💻 In my latest article, I dive into the top 5 XSS scanners you should know about in 2024:
1️⃣ Knoxss (@BRuteLogic and @KN0X55 )
2️⃣ XSStrike (by @s0md3v )
3️⃣ DalFox (by @hahwul )
4️⃣ XSS Scanner Online (by @pentesttoolscom )
5️⃣ XSSer (Kali Linux)
.
From in-depth analysis to practical use cases, I've covered everything you need to choose the best tool for your security toolkit. 🔒
..
📚 Read the full article to explore the features, pros, cons, and ideal use cases for each tool: 🚀
https://t.co/WrP1jF6Bsc

#cybersecurity #websecurity #XSS #infosec #pentesting #ethicalhacking #appsec #bugbounty #bugbountytips #BugHunter

[Writeup DB | Read More, Learn More! @writeup_db]

Check out this article by Jakub Żoczek (@zoczus) on XSS in WordPress via open embed auto-discovery! #WordPress #XSSProtection #WDB_47 #bugbountytips #BugBounty #infosec #writeup_db

https://t.co/yMmD0AWill

[Writeup DB | Read More, Learn More! @writeup_db]

Check out this article by Jakub Żoczek (@zoczus) on XSS in WordPress via open embed auto-discovery! #WordPress #XSSProtection #WDB_47 #bugbountytips #BugBounty #infosec #writeup_db

https://t.co/yMmD0AWill

[Writeup DB | Read More, Learn More! @writeup_db]

Top 10 Programming Languages for Cybersecurity Professionals in 2024
#infosec #cybersecurity #cybersecuritytips #bugbountytips

https://t.co/s24vFnOK8P

[Writeup DB | Read More, Learn More! @writeup_db]

What is DevSecOps? Integrating Security into the Development Pipeline https://t.co/Qbwv8CYU2V

#infosec #devops #CyberSecurity #infosecurity

[Writeup DB | Read More, Learn More! @writeup_db]

Check out this article by @ofir_balassiano discussing a vulnerability in GCP CloudSQL that leads to internal container access and data exposure. Stay informed about cybersecurity threats!
#GCP #WDB_59 #bugbountytips #BugBounty #infosec #writeup_db

https://t.co/8K69XNGDAQ

[Writeup DB | Read More, Learn More! @writeup_db]

Check out this article by Josip Franjkovic (@josipfranjkovic) discussing a Facebook CSRF vulnerability that could lead to a full account takeover. #BugBounty #WDB_5269 #bugbountytips #writeup_db

https://t.co/LeivdA9GVJ

[Writeup DB | Read More, Learn More! @writeup_db]

Check out this exciting write-up by Neh Patel (@thecyberneh) on how he earned $6000 with Microsoft Hall of Fame, Microsoft Firewall Bypass, CRLF to XSS, and Microsoft Bug Bounty. #InfoSec #BugBounty #Cybersecurity #WDB_5294 #bugbountytips #writeup_db

https://t.co/LDhKUMNxhd

[Writeup DB | Read More, Learn More! @writeup_db]

Christian Becker (@0xchrisb) explores a Persistent Cross-Site Scripting vulnerability in the Microsoft Azure Portal.
#Cybersecurity #MicrosoftAzure #WDB_2223 #bugbountytips #BugBounty #infosec #writeup_db

https://t.co/xClZ1yRndH

[The SecOps Group @TheSecOpsGroup]

🥇 FREE Certified AppSec Practitioner (CAP) exam! 🥇
** No Discount Code Needed**

To get the offer:
1. Retweet this post.
2. Fill this Google form -
📄 https://t.co/WVFmLaO3CZ
3. We will email you the exam details. 💯

🔗 Read more about our CAP exam -
https://t.co/iW47bEhG0s

#pentesting #CAPExam #Applicationsecurity #informationsecurity

[HackGit @hack_git]

🔐 Certificate Ripper

A CLI tool to extract server certificates

https://t.co/EkITXsyFCm

#cybersecurity #pentesting #bugbounty

[HackGit @hack_git]

the Deepfake Offensive Toolkit

dot (aka Deepfake Offensive Toolkit) makes real-time, controllable deepfakes ready for virtual cameras injection. dot is created for performing penetration testing against e.g. identity verification.

https://t.co/uWbxpkTq38

#infosec #redteam

[J1NX @J1NNX26]

Calling all #infosec fans!
🚀Join #WriteupDB's #giveaway to win premium subs(1M):
- #HTB VIP Plus
- #TryHackMe
- #PentesterLab

How to enter:
- Follow @writeup_db
- Comment "Why you want this?"
- (or) Submit content to https://t.co/y2Ufg8aDdr
- a random winner will be selected