Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Understanding Persistence Techniques in Penetration Testing
════════════════════════
𐀪 Author: Jay Vanyi
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 20:12:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #persistence #offensive_security #cybersecurity #threat_hunting
Medium
Understanding Persistence Techniques in Penetration Testing
A breakdown of the persistence methods attackers rely on and what defenders need to understand to fully remediate intrusions.
17 views
Daily Writeups
⤷ Title: Cracking “Blog”: A Deep Dive into WordPress Exploitation and SUID Binary Analysis
════════════════════════
𐀪 Author: IshhIshneet
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 20:16:02 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #cybersecurity #blog #walkthrough
Medium
Cracking “Blog”: A Deep Dive into WordPress Exploitation and SUID Binary Analysis
📌 Introduction
25 views
Daily Writeups
⤷ Title: Blackhat Hackers vs Ethical Hackers | Cybersecurity Tutorial
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 21:10:34 GMT
════════════════════════
⌗ Tags: #che #ethical_hacking #cybersecurity #white_hat_hacker #hacker
Medium
Blackhat Hackers vs Ethical Hackers | Cybersecurity Tutorial
The Same Skills, The Same Tools, A Completely Different Path
29 views
Daily Writeups
⤷ Title: Agent T TryHackMe Write UP
════════════════════════
𐀪 Author: cat0x01
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 23:33:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ctf #bug_bounty #tryhackme
Medium
Agent T TryHackMe Write UP
We’re back with a new TryHackMe challenge called Agent T.
21 views
Daily Writeups
⤷ Title: Cybersecurity in 2026 and Beyond: Everything Has Already Changed
════════════════════════
𐀪 Author: Vatsal Gupta
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 23:46:52 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #technology #future #infosec #cybersecurity
Medium
Cybersecurity in 2026 and Beyond: Everything Has Already Changed
In 2026, security isn’t about blocking code — it’s about protecting logic, identity, decisions we make.
19 views
Daily Writeups
⤷ Title: CVE Program to Normalize Formatting of Date/Time Fields Across Historical CVE Records Beginning in…
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 23:28:18 GMT
════════════════════════
⌗ Tags: #information_security #vulnerability_management #vulnerability #cybersecurity #infosec
Medium
CVE Program to Normalize Formatting of Date/Time Fields Across Historical CVE Records Beginning in…
The CVE™ Program is planning to begin normalizing the formatting of date/time fields across historical CVE Records in February 2026 (see…
18 views
Daily Writeups
⤷ Title: Advent of Cyber — Day 6: Malware Analysis — Egg-xecutable
════════════════════════
𐀪 Author: Samuel Mikeng Mbongo
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 23:15:01 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme #cybersecurity
Medium
Advent of Cyber — Day 6: Malware Analysis — Egg-xecutable
Advent of Cyber — Day 6: Malware Analysis — Egg-xecutable While Wareville sleeps peacefully under the winter sky, the SOC team at The Best Festival Company (TBFC) is wide awake. Screens glow …
14 views
Daily Writeups
⤷ Title: Advent of Cyber — Day 5: IDOR — Santa’s Little IDOR
════════════════════════
𐀪 Author: Samuel Mikeng Mbongo
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 23:11:57 GMT
════════════════════════
⌗ Tags: #tryhackme #advent_of_cyber_2025 #cybersecurity
Medium
Advent of Cyber — Day 5: IDOR — Santa’s Little IDOR
Advent of Cyber — Day 5: IDOR — Santa’s Little IDOR Since McSkidy went missing, the elves of Wareville have been on high alert. What started as a few support tickets quickly turned into …
20 views
Daily Writeups
⤷ Title: Natas17 Write‑Up Time‑Based Blind SQL Injection
════════════════════════
𐀪 Author: Oct Diz
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 22:13:49 GMT
════════════════════════
⌗ Tags: #sql_injection #blind_sql_injection #sql
Medium
🔐 Natas17 Write‑Up Time‑Based Blind SQL Injection
OverTheWire Natas Level 17
21 views
Daily Writeups
⤷ Title: CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:53:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CERT/CC #CVE_2025_14026 #DLP (Data Loss Prevention) #Enterprise Security #Forcepoint #Python Security #Sandbox Escape
Daily CyberSecurity
CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python
A high-severity vulnerability in the Forcepoint One DLP Client has been disclosed, revealing a method for attackers to break out of a vendor-imposed “sandbox” and execute arbitrary cod…
23 views
Daily Writeups
⤷ Title: Google Patches High-Severity “WebView” Flaw in Chrome 143
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:44:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #CVE_2026_0628 #Gal Weizman #google chrome #software update #vulnerability management #WebView #zero_day
Daily CyberSecurity
Google Patches High-Severity “WebView” Flaw in Chrome 143
Google has announced an important security update for the Stable channel of its Chrome browser, rolling out patches to Windows, Mac, and Linux users to address a high-severity vulnerability that c…
60 views
Daily Writeups
⤷ Title: Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:22:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #Chronomaly #CVE_2025_38352 #farazsth98 #InfoSec 2026 #Linux Kernel #POSIX CPU Timers #privilege escalation #Root Exploit #zero_day
Daily CyberSecurity
Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels
Cybersecurity researcher farazsth98 has presented new findings related to an exploited security issue in Linux kernel flaw that could be abused by an attacker to privilege escalation. The vulnerab…
10 views
Daily Writeups
⤷ Title: The ClickFix Trap: PHALT#BLYX Targets Hotels with Fake Blue Screens and DCRat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:18:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AsyncRAT #Booking.com Scam #BSOD Malware #ClickFix #Cyber Espionage 2026 #DCRat #Hospitality Security #PHALT#BLYX #Securonix #social engineering
Daily CyberSecurity
The ClickFix Trap: PHALT#BLYX Targets Hotels with Fake Blue Screens and DCRat
A sophisticated new cyber-espionage campaign is targeting the hospitality industry, turning everyday booking management into a nightmare scenario. Securonix threat researchers have uncovered a ste…
12 views
Daily Writeups
⤷ Title: Popular Chinese Utility Hijacked to Deploy Browser Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:06:51 +0000
════════════════════════
⌗ Tags: #Malware #browser hijacking #cybersecurity #Data Privacy #Digital Signatures #Malware Analysis #Microsoft Edge Extensions #Mltab #Office Assistant #QiAnXin #threat intelligence
Daily CyberSecurity
Popular Chinese Utility Hijacked to Deploy Browser Malware
The RedDrip Team at QiAnXin Technology’s Threat Intelligence Center has uncovered a widespread malware campaign hiding inside a popular productivity tool. The “Office Assistant” softwa…
13 views
Daily Writeups
⤷ Title: CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:01:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #API security #Credential Harvesting #CVE_2025_67732 #Dify #Information Disclosure #Langgenius #LLM #OpenAI #Patch Alert #Plaintext Credentials #RAG
Daily CyberSecurity
CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure
Dify, the popular open-source platform used by developers to build Large Language Model (LLM) applications and RAG pipelines, has patched a high-severity vulnerability that could leave administrat…
18 views
Daily Writeups
⤷ Title: Why Your Cache Rules are Leaking User Data (Web Cache Deception)
════════════════════════
𐀪 Author: Nullifiedsec
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:58:19 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #web_cache_deception #bug_bounty #web_cache_poisoning
Medium
Why Your Cache Rules are Leaking User Data (Web Cache Deception)
(The original article is in my website click here to view it)
20 views
Daily Writeups
⤷ Title: Nmap Guide for Bug Bounty: Port Scanning and WAF Evasion
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:02:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #cybersecurity #penetration_testing #hacking
Medium
Nmap Guide for Bug Bounty: Port Scanning and WAF Evasion
Master Nmap for Bug Bounty: rapid scanning techniques, use of NSE scripts, and advanced strategies for evading firewalls and WAFs.
21 views
Daily Writeups
⤷ Title: JTAG Is the Quietest Backdoor You’ve Never Logged
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:13:38 GMT
════════════════════════
⌗ Tags: #jtag #backdoor #programming #hacking_tools #hacking
Medium
JTAG Is the Quietest Backdoor You’ve Never Logged
Photo by Rene on Unsplash
20 views
Daily Writeups
⤷ Title: Tanuki -Writeup
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:15:02 GMT
════════════════════════
⌗ Tags: #ctf_writeup #bug_bounty_writeup #cybersecurity #bugforge #xxe
Medium
Tanuki -Writeup
I recently became aware of bugforge.io , a great new platform that’s still in its infancy but has a lot of potential. They do a daily…
20 views
Daily Writeups
⤷ Title: Automating HackerOne Scope Parsing with qsv for Bug Bounty Recon
════════════════════════
𐀪 Author: Sam Hilliard
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 03:27:29 GMT
════════════════════════
⌗ Tags: #scripting #bug_bounty #recon #csv
Medium
Automating HackerOne Scope Parsing with qsv for Bug Bounty Recon
Before you start bug hunting on a new program, you need to feed the right assets to the right tools for automated recon. Sorting through…
21 views
Daily Writeups
⤷ Title: From Code to Cloud: How App Security Audits Protect Your Digital Assets
════════════════════════
𐀪 Author: Smart City System - HR Software | HRMS | Payroll
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 03:48:35 GMT
════════════════════════
⌗ Tags: #application_security #app_security #app_security_audit #web_app_security #web_application_security
Medium
From Code to Cloud: How App Security Audits Protect Your Digital Assets
Modern applications no longer reside in a single location. They span source code repositories, development pipelines, cloud platforms…
26 views