Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Building Cybersecurity Learning Roadmap For CTIS Students
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 22:49:30 GMT
════════════════════════
⌗ Tags: #offensive_security #cybersecurity #information_security #ethical_hacking #career_advice
Medium
Building Cybersecurity Learning Roadmap For CTIS Students
A complete guide mapping Bilkent CTIS curriculum to real-world pentesting skills.
36 views
Daily Writeups
⤷ Title: Refresh Token Rotation Done Right: How to Protect Your Backend from Token Theft
════════════════════════
𐀪 Author: BlockchainBard
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 01:25:03 GMT
════════════════════════
⌗ Tags: #security #technology #hacking #cyber_security_awareness #backend
Medium
Refresh Token Rotation Done Right: How to Protect Your Backend from Token Theft
Introduction
42 views
Daily Writeups
⤷ Title: Recon Is Not About Tools, It’s About Thinking
════════════════════════
𐀪 Author: cat0x01
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:44:46 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentester #hacking #reconnaissance #cybersecurity
Medium
Recon Is Not About Tools, It’s About Thinking
Why mindset matters more than scanners in penetration testing
33 views
Daily Writeups
⤷ Title: BAC (Privilege Escalation): How a Simple Method Swap Exposed Sensitive Admin Data
════════════════════════
𐀪 Author: Mostafa Muhammed
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:29:57 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty_tips #hacking #bug_bounty
Medium
BAC (Privilege Escalation): How a Simple Method Swap Exposed Sensitive Admin Data
قَالُوا سُبْحَانَكَ لَا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا ۖ إِنَّكَ أَنتَ الْعَلِيمُ الْحَكِيمُ [ البقرة: 32]
42 views
Daily Writeups
⤷ Title: Business Logic Vulnerabilities Are Engineering Bugs
════════════════════════
𐀪 Author: Phani Varun Munukuntla
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:20:01 GMT
════════════════════════
⌗ Tags: #backend_engineering #software_architecture #application_security #product_security #security_engineering
Medium
Business Logic Vulnerabilities Are Engineering Bugs
Introduction
27 views
Daily Writeups
⤷ Title: eWTPXv3: A review and some advice.
════════════════════════
𐀪 Author: Daniel Scragg
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 03:45:17 GMT
════════════════════════
⌗ Tags: #hacking #web_application_security
24 views
Daily Writeups
⤷ Title: Beyond the Locks: Secure Protocols and the Quiet Power of Session Keys
════════════════════════
𐀪 Author: Manubhav Sharma
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 03:56:43 GMT
════════════════════════
⌗ Tags: #cryptography #cybersecurity #security #infosec #information_security
Medium
Beyond the Locks: Secure Protocols and the Quiet Power of Session Keys
Previous Post: https://medium.com/@letshackit/digital-trust-how-pgp-hashing-and-digital-signatures-really-work-9e70daa27547
16 views
Daily Writeups
⤷ Title: CISSP Domain 3: Cryptography Coffee Shots
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:41:39 GMT
════════════════════════
⌗ Tags: #coffeeshots #infosec #domains #cybersecurity #cissp
Medium
🔐 CISSP Domain 3: Cryptography Coffee Shots
20 Questions to Master the Art of Secret Keeping!
14 views
Daily Writeups
⤷ Title: CISSP HARD Questions: Domains 1, 2 & 3
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:41:22 GMT
════════════════════════
⌗ Tags: #hard_questions #exam_prep #infosec #cissp #cyber_security_management
Medium
🔥 CISSP HARD Questions: Domains 1, 2 & 3
Real-World Scenarios That Will Make Your Brain Sweat!
26 views
Daily Writeups
⤷ Title: Complete Roadmap to Become a Digital Forensics Expert (From Zero to Pro)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 03:34:35 GMT
════════════════════════
⌗ Tags: #digital_forensics #penetration_testing #cybersecurity #roadmaps #ethical_hacking
Medium
Complete Roadmap to Become a Digital Forensics Expert (From Zero to Pro)
The Truth About Building a Career in Digital Investigation
22 views
Daily Writeups
⤷ Title: Lab: Reflected XSS in canonical link tag
════════════════════════
𐀪 Author: KRY
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:13:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberkry #xx #penetration_testing #portswigger
Medium
Lab: Reflected XSS in canonical link tag
Description
22 views
Daily Writeups
⤷ Title: Lab: Reflected XSS with some SVG markup allowed
════════════════════════
𐀪 Author: KRY
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:10:53 GMT
════════════════════════
⌗ Tags: #xx #cybersecurity #portswigger #cyberkry #penetration_testing
Medium
Lab: Reflected XSS with some SVG markup allowed
Description
25 views
Daily Writeups
⤷ Title: TryHackMe Carrotbane of My Existence Walk Through
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 03:30:39 GMT
════════════════════════
⌗ Tags: #ctf #side_quest #advent_of_cyber_2025 #tryhackme
Medium
TryHackMe Carrotbane of My Existence Walk Through
Hopper’s uprising is just getting started.
37 views
Daily Writeups
⤷ Title: CEHv12: Cloud Computing(Practised) (Module 18)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 03:01:45 GMT
════════════════════════
⌗ Tags: #module19 #ethical_hacking #cloud_computing #cloud_hacking #che
48 views
Daily Writeups
⤷ Title: CEHv12: IoT and OT Hacking (Practised) (Module 18)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 02:56:25 GMT
════════════════════════
⌗ Tags: #ot_hacking #mqtt #che #ethical_hacking #iot_hacking
Medium
CEHv12: IoT and OT Hacking (Practised) (Module 18)
What is IoT?
54 views
Daily Writeups
⤷ Title: Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication System
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 19:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: Apache NuttX RTOS Patches Two Filesystem Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 05:51:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache NuttX #CVE_2025_48768 #CVE_2025_48769 #Denial of Service #embedded systems #IoT security #memory corruption #RTOS #use after free #VFS #Virtual Filesystem
Daily CyberSecurity
Apache NuttX RTOS Patches Two Filesystem Flaws
The Apache Software Foundation has released updates for Apache NuttX, a real-time operating system (RTOS) widely used in environments ranging from 8-bit to 64-bit microcontrollers. The alerts high…
❤1
42 views
Daily Writeups
⤷ Title: The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:18:13 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT group #cyber_espionage #HoneyMyte #kaspersky #Kernel_Mode #Microsoft Defender Bypass #Mustang Panda #Myanmar #ProjectConfiguration.sys #rootkit #Southeast Asia #Thailand #ToneShell
Daily CyberSecurity
The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments
The notorious cyber-espionage group HoneyMyte (also known as Mustang Panda or Bronze President) has dramatically upgraded its arsenal, deploying a sophisticated kernel-mode rootkit to entrench its…
21 views
Daily Writeups
⤷ Title: Hijacked Mobility: CISA Warns of Critical 9.8 Flaw Allowing Remote Control of WHILL Power Chairs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:10:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Bluetooth Hijacking #CISA #CVE_2025_14346 #firmware update #IoT Safety #Medical Device Security #Model C2 #Model F #Power Wheelchair #WHILL
Daily CyberSecurity
Hijacked Mobility: CISA Warns of Critical 9.8 Flaw Allowing Remote Control of WHILL Power Chairs
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding a critical safety vulnerability in popular electric mobility devices that could turn a user’s whe…
26 views
Daily Writeups
⤷ Title: The $130 Billion Comeback: Why Apple’s “Slow” AI Strategy is a 2026 Trap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:05:37 +0000
════════════════════════
⌗ Tags: #Technology #AI Strategy #Apple #Cash Reserves #Google Gemini #iOS 26 #iPhone 17 #John Giannandrea #Liquid Glass #Mike Rockwell #Siri 2.0 #Tech News 2026
Daily CyberSecurity
The $130 Billion Comeback: Why Apple’s “Slow” AI Strategy is a 2026 Trap
Although Apple’s 2025 software updates appeared to shift the marketing spotlight toward the “Liquid Glass” visual interface rather than loudly championing generative AI—prompting criticism that th…
22 views
Daily Writeups
⤷ Title: F-Droid Upgrades Hardware as Google Moves to End Anonymous Sideloading
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:03:09 +0000
════════════════════════
⌗ Tags: #Technology #android #developer verification #F_Droid #google #Infrastructure #open_source #privacy #Sideloading #SSE4.1 #SSSE3 #Tizen OS
Daily CyberSecurity
F-Droid Upgrades Hardware as Google Moves to End Anonymous Sideloading
The well-known Android app repository F-Droid had previously disclosed that it was in the process of acquiring new servers to replace its existing infrastructure. The primary issue with the curren…
20 views