Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: Guía de Nmap para Bug Bounty: Escaneo de Puertos y Evasión de WAF
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:02:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #technology #hacking #penetration_testing
Medium
Guía de Nmap para Bug Bounty: Escaneo de Puertos y Evasión de WAF
Domina Nmap para Bug Bounty: técnicas de escaneo rápido, uso de scripts NSE y estrategias avanzadas para evadir firewalls y WAF.
21 views
Daily Writeups
⤷ Title: Security-First Web Development: Building Resilient Applications
════════════════════════
𐀪 Author: Nayan Goel
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:55:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_web_development #application_security #secure_coding #web_development
Medium
Security-First Web Development: Building Resilient Applications
Introduction
18 views
Daily Writeups
⤷ Title: CISSP Domain 4 Mastery Series| Part 2: Firewall Architecture & Types
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 01:42:25 GMT
════════════════════════
⌗ Tags: #domain2 #infosec #cissp #cybersecurity #zero_trust
Medium
CISSP Domain 4 Mastery Series| Part 2: Firewall Architecture & Types
Master the art of network perimeter defense
25 views
Daily Writeups
⤷ Title: TryHackMe: Biohazard Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 01:19:36 GMT
════════════════════════
⌗ Tags: #pentesting #information_security #tryhackme #cybersecurity
Medium
TryHackMe: Biohazard Writeup
This box is ranked medium difficulty on THM and is centered around the Resident Evil game. The overarching challenge of this box is…
25 views
Daily Writeups
⤷ Title: Manual SQL Injection Using HackBar (Cyberfox) Complete Beginner Guide
════════════════════════
𐀪 Author: Purushotham.R
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:17:45 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #cybersecurity #ethical_hacking #sql_injection
Medium
Manual SQL Injection Using HackBar (Cyberfox) Complete Beginner Guide
⚠️ Legal Disclaimer
35 views
Daily Writeups
⤷ Title: The Dormant Hacker: Why My 20-Year Detour Only Made Me Sharper
════════════════════════
𐀪 Author: Anthony Depaz
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:48:22 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #reading #safety #life_lessons
Medium
The Dormant Hacker: Why My 20-Year Detour Only Made Me Sharper
The hum of a 56k modem is a sound you never forget. It’s a digital handshake a gateway to a world where a 10-year-old kid from the…
38 views
Daily Writeups
⤷ Title: Weaponizing HTTP Headers: The Reconnaissance Phase
════════════════════════
𐀪 Author: Martin Simonyan
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 01:51:19 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #web_development #osint #information_security
Medium
Weaponizing HTTP Headers: The Reconnaissance Phase
This is Part 1 of a series on offensive HTTP header exploitation. For the complete technical breakdown with detailed examples and…
46 views
Daily Writeups
⤷ Title: New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 10:38:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:16:34 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Authenticode #Cybersecurity 2026 #MSBuild #MSI Exploitation #privilege escalation #Race Condition #red teaming #SetupHijack #UAC bypass #Windows Security
Information Security News
The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or upda…
38 views
Daily Writeups
⤷ Title: The Visa Trap: Dubai Police Warn of Deepfake-Driven Work Permit Scams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:12:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals ##BewareOfFraud #2026 News #deepfakes #Dubai Police #Fraud Alert #GDRFA #MoHRE #Recruitment Fraud #Scam Prevention #UAE Jobs #Work Visa
Information Security News
The Visa Trap: Dubai Police Warn of Deepfake-Driven Work Permit Scams
Dubai has seen a surge in fraud schemes involving fake job offers and visa arrangements. Local police warn that criminals are actively using forged employment guarantees and fictitious sponsorship…
17 views
Daily Writeups
⤷ Title: The Trojan in the Living Room: How the Kimwolf Botnet Hijacked 2 Million Android Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:10:25 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android TV Box #BOTNET #Brian Krebs #Cybersecurity 2026 #IoT Security #IPIDEA #Kimwolf #Residential Proxies #Synthient #XLab
Information Security News
The Trojan in the Living Room: How the Kimwolf Botnet Hijacked 2 Million Android Devices
More than two million infected devices worldwide—this is the scale of the new botnet known as Kimwolf, according to an assessment published by Synthient. The countries reporting the highest number…
17 views
Daily Writeups
⤷ Title: The 20-Year Showdown: Why Windows 8.1 Just Beat Windows 11 in a Massive Speed Test
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:07:45 +0000
════════════════════════
⌗ Tags: #Technology #Windows #Benchmarks #Microsoft #RAM Management #Speed Test #Tech News 2026 #ThinkPad X220 #TrigrZolt #Windows 11 #WIndows 8.1 #Windows XP
12 views
Daily Writeups
⤷ Title: The Digital Insider: Why Autonomous AI Agents Are 2026’s Biggest Security Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:02:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Agentic AI #AI Agents #cybersecurity #Enterprise AI #Gartner 2026 #Insider Threat #Palo Alto Networks #Prompt Injection #Superuser Problem #Wendi Whitmore
Information Security News
The Digital Insider: Why Autonomous AI Agents Are 2026’s Biggest Security Risk
Artificial intelligence, now an indispensable assistant in business, is increasingly being viewed as a potential source of internal threats. According to Wendy Whitmore, head of security research …
15 views
Daily Writeups
⤷ Title: The Rubin Era: NVIDIA’s Next-Gen AI Factory Chips Enter Mass Production
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:30:33 +0000
════════════════════════
⌗ Tags: #Technology #3nm Process #Agentic AI #AI Factory #Blackwell #CES 2026 #DGX SuperPOD #MoE Models #nvidia #NVLink 6 #Olympus Cores #Rubin GPU #Vera CPU
Daily CyberSecurity
The Rubin Era: NVIDIA’s Next-Gen AI Factory Chips Enter Mass Production
Following the Blackwell architecture, NVIDIA formally announced at CES 2026 that its next-generation AI computing platform, codenamed “Rubin,” has entered full-scale mass production. NVIDIA CEO Je…
13 views
Daily Writeups
⤷ Title: The Reasoning Car: NVIDIA Launches Alpamayo to Give AI Vehicles Human Logic
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:26:51 +0000
════════════════════════
⌗ Tags: #Technology #Alpamayo #AlpaSim #Autonomous Driving #CES 2026 #DRIVE Hyperion #Level 4 Autonomy #Mercedes_Benz CLA #nvidia #Open_Source AI #Physical AI #VLA Model
Daily CyberSecurity
The Reasoning Car: NVIDIA Launches Alpamayo to Give AI Vehicles Human Logic
At CES 2026 this year, NVIDIA once again demonstrated its technological prowess in the autonomous driving arena, unveiling a new suite of open-source AI models and simulation tools under the name …
12 views
Daily Writeups
⤷ Title: The Desk-Side Revolution: NVIDIA’s DGX Spark Update Delivers 2.5× AI Speed Boost
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:22:22 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Development #Blackwell GPU #CES 2026 #DGX Spark #MacBook Pro M4 #Nsight Copilot #nvidia #PyTorch #Qwen_235B #RTX 5090 #TRT_LLM
Daily CyberSecurity
The Desk-Side Revolution: NVIDIA’s DGX Spark Update Delivers 2.5× AI Speed Boost
As downloads of open-source AI models and frameworks are expected to surge explosively in 2026, NVIDIA announced a major update to its desktop AI development platform, DGX Spark, at CES 2026. This…
12 views
Daily Writeups
⤷ Title: The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:43:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bare Metal #Bootstrapping Vulnerability #default credentials #Harvester HCI #information_security #Infrastructure as Code #Kubernetes #Rancher #SSH security #virtualization
Daily CyberSecurity
The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
Harvester, the open-source hyperconverged infrastructure (HCI) solution built on Kubernetes, has hit a critical bug. A new vulnerability, tracked as CVE-2025-62877, exposes a dangerous timing wind…
14 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
13 views
Daily Writeups
⤷ Title: Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:23:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #aiohttp #Asyncio #CVE_2025_69224 #CVE_2025_69227 #CVE_2025_69228 #Denial of Service #dos #Infinite Loop #infosec #memory exhaustion #Python #request smuggling #web development
Daily CyberSecurity
Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
Maintainers of aiohttp, the popular asynchronous HTTP client/server framework for Python, have released a sweeping security update addressing seven distinct vulnerabilities. The update, version 3.…
13 views
Daily Writeups
⤷ Title: Apache SIS Patch Blocks XML Attack That Leaks Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:07:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SIS #Apache Software Foundation #CVE_2025_68280 #Geospatial Security #GeoTIFF #GML #GPX #Information Disclosure #Java security #Metadata Security #XML Injection #xxe
Daily CyberSecurity
Apache SIS Patch Blocks XML Attack That Leaks Server Files
The Apache Software Foundation has issued a security advisory for the Apache Spatial Information System (SIS), a key Java library used for developing geospatial applications. A newly discovered vu…
14 views
Daily Writeups
⤷ Title: CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kyuubi #Apache Software Foundation #CVE_2025_66518 #Data Lake Security #Directory Allow_list #Information Disclosure #Path Traversal #Serverless SQL #Spark SQL #Vulnerability
Daily CyberSecurity
CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
Apache Kyuubi, the distributed gateway designed to provide secure, serverless SQL access to massive data lakes, has patched a high-severity vulnerability that could allow unauthorized access to th…
12 views