Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Google Appspot XSS CTF Walkthrough
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 18:59:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #cross_site_scripting #google #ctf #xs
Medium
Google Appspot XSS CTF Walkthrough 🎯
XSS, DOM Manipulation, Input Reflection — A complete step-by-step walkthrough of Google’s XSS Game demonstrating real-world cross-site…
45 views
Daily Writeups
⤷ Title: From Reverse DNS to Super Admin: How I Earned $7,500 Finding an Exposed Admin Panel
════════════════════════
𐀪 Author: Ahmed Ghadban
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:50:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips #hacking #bugs
Medium
From Reverse DNS to Super Admin: How I Earned $7,500 Finding an Exposed Admin Panel
Severity: Critical (10.0)
42 views
Daily Writeups
⤷ Title: How to Start Bug Bounty Hunting
════════════════════════
𐀪 Author: Codi
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:16:22 GMT
════════════════════════
⌗ Tags: #bug_hunting #ethical_hacking #bug_bounty #infosec #cybersecurity
Medium
How to Start Bug Bounty Hunting
A Realistic Beginner’s Roadmap From My First 90 Days
47 views
Daily Writeups
⤷ Title: Understanding PII and Initial Discovery Techniques (Part 1/3)
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 20:29:01 GMT
════════════════════════
⌗ Tags: #leakage #bug_bounty_writeup #bug_bounty_tips #cybersecplayground #bug_bounty
Medium
🎓 Understanding PII and Initial Discovery Techniques (Part 1/3) 🎓
Personally Identifiable Information (PII) is any data that can identify an individual. In security testing and bug bounty hunting, finding…
24 views
Daily Writeups
⤷ Title: Linux’ta Ağ Yönetimi
════════════════════════
𐀪 Author: g.o.
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:21:39 GMT
════════════════════════
⌗ Tags: #networking #hacking #siber_guvenlik #cybersecurity #linux
Medium
Linux’ta Ağ Yönetimi
Siber Vatan Yolculuğu — 11
16 views
Daily Writeups
⤷ Title: Linux’ta Süreç (Process) Yönetimi
════════════════════════
𐀪 Author: g.o.
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 20:40:32 GMT
════════════════════════
⌗ Tags: #linux #process #cybersecurity #hacking #siber_guvenlik
Medium
Linux’ta Süreç (Process) Yönetimi
Siber Vatan Yolculuğu — 10
20 views
Daily Writeups
⤷ Title: eMAPT Review: How I Got Certified in Mobile Pentesting
════════════════════════
𐀪 Author: B13ss3d
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 20:35:56 GMT
════════════════════════
⌗ Tags: #pentesting #emapt #android #hacking #certification
Medium
eMAPT Review: How I Got Certified in Mobile Pentesting
Hi everyone! I’m Luis Eduardo Platero Fuentes (B13ss3d). Since the beginning of 2025, I set myself a clear goal: I didn’t want to end the…
33 views
Daily Writeups
⤷ Title: NMAP: The GOAT of Reconnaissance
════════════════════════
𐀪 Author: Cybersensus
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 20:17:35 GMT
════════════════════════
⌗ Tags: #hacking #technology #cybersecurity #ethical_hacking #red_team
Medium
NMAP: The GOAT of Reconnaissance
In the vast cybersecurity universe, we’re spoiled for choice. Tools, frameworks, and scripts flood our feeds daily — so much that it’s…
31 views
Daily Writeups
⤷ Title: CyberTalents — Evil Rick writeup
════════════════════════
𐀪 Author: Abdelrahman Zourob
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:27:22 GMT
════════════════════════
⌗ Tags: #infosec #web_security #cybersecurity #ctf #ctf_writeup
Medium
CyberTalents — Evil Rick writeup
Hey everyone! I recently decided to tackle the Evil Rick challenge. It’s a Web Security challenge that involves investigating a…
33 views
Daily Writeups
⤷ Title: The Watchman’s Residue Sherlock | Hack The Box Walkthrough
════════════════════════
𐀪 Author: Jack Dignam
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:18:00 GMT
════════════════════════
⌗ Tags: #hackthebox #blue_team #hackthebox_walkthrough #hackthebox_writeup
Medium
The Watchman’s Residue Sherlock | Hack The Box Walkthrough
Analyze multiple artifacts using RMM Logs, Windows Triage images, and Packet Captures to create an incident timeline
35 views
Daily Writeups
⤷ Title: Host Header Injection in Password Reset Function Leading to Account Takeover and Blind SSRF
════════════════════════
𐀪 Author: Mahmoud Gamal
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 22:42:39 GMT
════════════════════════
⌗ Tags: #ssrf #bug_bounty #writeup #account_takeover #cybersecurity
Medium
Host Header Injection in Password Reset Function Leading to Account Takeover and Blind SSRF
Introduction
45 views
Daily Writeups
⤷ Title: Thread Name Calling Injection
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 22:34:51 GMT
════════════════════════
⌗ Tags: #malware #hacker #hacking #pentesting #cybersecurity
Medium
Thread Name Calling Injection
Welcome to this new Medium post, in this one I will show you an interesting technique created and documented by hasherezade! The technique…
29 views
Daily Writeups
⤷ Title: Malware Reverse Engineering Infrastructure
════════════════════════
𐀪 Author: bl77rd
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 21:55:29 GMT
════════════════════════
⌗ Tags: #malware_analysis #cybersecurity #information_technology #malware #infosec
Medium
Malware Reverse Engineering Infrastructure
Hello all and longtime no see!
23 views
Daily Writeups
⤷ Title: Baby | Hack The Box Walkthrough
════════════════════════
𐀪 Author: WireHawk Security
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 22:33:58 GMT
════════════════════════
⌗ Tags: #security #penetration_testing #information_technology #cybersecurity #information_security
Medium
Baby 👶 | Hack The Box Walkthrough
Walkthrough for “Baby” on Hack The Box
25 views
Daily Writeups
⤷ Title: The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
Daily CyberSecurity
The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
Joseph Goydish uncovers a critical integer overflow in iOS 26.2’s WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.
22 views
Daily Writeups
⤷ Title: PoC Released: MongoBleed Exploit Allows Unauthenticated Attackers to Drain MongoDB Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:40:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14847 #Data Breach #database security #Heap Over_read #Information Disclosure #infosec #Joe Desimone #Memory Leak #MongoBleed #mongodb #PoC #zlib
Daily CyberSecurity
PoC Released: MongoBleed Exploit Allows Unauthenticated Attackers to Drain MongoDB Memory
MongoBleed (CVE-2025-14847) allows unauthenticated MongoDB memory leaks. With Joe Desimone's PoC released, upgrade to v8.0.17 or v7.0.28 now!
16 views
Daily Writeups
⤷ Title: Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:35:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Adobe ColdFusion #Christmas 2025 #CTG Server Limited #CVE_2017_9841 #CVE_2023_26360 #cyber_espionage #GreyNoise #IAB #initial access broker #Japan_based Threat #java #Mass Exploitation
Daily CyberSecurity
Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.
14 views
Daily Writeups
⤷ Title: “Headphone Jacking”: Critical Flaws in Popular Earbuds Let Hackers Hijack Your Phone
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:29:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Airoha RACE #Bluetooth security #CVE_2025_20700 #firmware update #Headphone Jacking #infosec #Jabra #JBL #Marshall #sony #TWS Earbuds #Wireless Security
Daily CyberSecurity
"Headphone Jacking": Critical Flaws in Popular Earbuds Let Hackers Hijack Your Phone
ERNW exposes "Headphone Jacking," a critical Airoha RACE flaw in Sony & JBL chips allowing hackers to eavesdrop and hijack connected smartphones.
24 views
Daily Writeups
⤷ Title: CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #Autonomous Hacking #CVE_2025_54322 #Networking Security #pwn.ai #rce #Remote Code Execution #SD_WAN #SXZOS #Xspeeder #zero_day
Daily CyberSecurity
CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear
pwn.ai reveals CVE-2025-54322, the first remotely exploitable zero-day found by autonomous AI agents, targeting Xspeeder SD-WAN gear globally.
17 views
Daily Writeups
⤷ Title: EmEditor Compromised: “WALSHAM” Imposter Poisons Official Installer with Spyware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:16:52 +0000
════════════════════════
⌗ Tags: #Malware #browser extension #cyber_espionage #cybersecurity #Data Breach #EmEditor #Google Drive Caching #Infostealer #malware #RedDrip Team #supply chain attack #WALSHAM INVESTMENTS LIMITED
Daily CyberSecurity
EmEditor Compromised: "WALSHAM" Imposter Poisons Official Installer with Spyware
EmEditor confirms its official site was compromised, redirecting users to a malicious MSI signed by WALSHAM INVESTMENTS LIMITED to steal sensitive data.
15 views
Daily Writeups
⤷ Title: The Performance Propeller: Google Proposes Upstreaming Its High-Octane Optimizer to LLVM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:16:48 +0000
════════════════════════
⌗ Tags: #Linux #BOLT #Clang #Compiler Optimization #google #Linux Kernel #LLD #LLVM #open_source #Performance Engineering #PGO #Post_Link Optimization #Propeller
Daily CyberSecurity
The Performance Propeller: Google Proposes Upstreaming Its High-Octane Optimizer to LLVM
Google is upstreaming Propeller to LLVM, bringing its 10% performance boost for the Linux kernel and large-scale apps to the standard compiler toolchain.
17 views