Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Cloud Computing Fundamentals · TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 18:23:13 GMT
════════════════════════
⌗ Tags: #cloud_computing #information_technology #tryhackme_walkthrough #cybersecurity #tryhackme
Medium
Cloud Computing Fundamentals · TryHackMe Walkthrough
Discover how cloud computing helps businesses move faster, do more, and scale with less effort.
30 views
Daily Writeups
⤷ Title: Windows Security Privileges for Pentesters
════════════════════════
𐀪 Author: Victor Aaron Winnercoz
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 19:33:52 GMT
════════════════════════
⌗ Tags: #windows_security #ethical_hacking #active_directory_security #azure_active_directory
Medium
Windows Security Privileges for Pentesters
You’ve breached the perimeter, bypassed AV, and established a foothold. The critical question now is: are you stuck as a low-privileged…
44 views
Daily Writeups
⤷ Title: Desctiption :
I wanted to join an organization i was not part of , by adding a new user and…
════════════════════════
𐀪 Author: Simo
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 21:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #security
Medium
Desctiption : I wanted to join an organization i was not part of , by adding a new user and…
Desctiption : I wanted to join an organization i was not part of , by adding a new user and changing my org-id to another organization but it didnt work , i noticed on the request parameter db=1 so i …
39 views
Daily Writeups
⤷ Title: #9: Improper Inventory Management — The APIs You Forgot You Had
════════════════════════
𐀪 Author: Emmanuelnnebedum
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 21:41:34 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #api #owasp_api_security_top_10 #api_security_testing
Medium
#9: Improper Inventory Management — The APIs You Forgot You Had
Introduction Welcome to Day 9 of the series! We are looking at API9:2023 Improper Inventory Management.
32 views
Daily Writeups
⤷ Title: CopyPasta writeup (Bugforge)
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 21:07:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #ctf #bugforge #hacking
Medium
CopyPasta writeup (Bugforge)
🍺 Quick message to readers: if my writeups help you, please consider a small donation to my buymeacoffee link here. This is not required…
24 views
Daily Writeups
⤷ Title: A Bug Bounty Masterclass Walkthrough
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 20:37:11 GMT
════════════════════════
⌗ Tags: #bug_bounty_masterclass #cyber #hacking
Medium
A Bug Bounty Masterclass Walkthrough
In bug bounty hunting, we often say that “complexity is the enemy of security.” But sometimes, the enemy is simply forgetfulness. While…
18 views
Daily Writeups
⤷ Title: How to Become an Ethical Hacker using Python (Real, Practical, Legal)
════════════════════════
𐀪 Author: Brock stone
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 20:20:37 GMT
════════════════════════
⌗ Tags: #programming #technology #aws #hacking #python
Medium
How to Become an Ethical Hacker using Python (Real, Practical, Legal)
From Beginner to Pro: Build Real Hacking Skills the Ethical Way
16 views
Daily Writeups
⤷ Title: Virtualisation Basics · TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 20:00:08 GMT
════════════════════════
⌗ Tags: #architecture #tryhackme_walkthrough #cybersecurity #security #tryhackme
Medium
Virtualisation Basics · TryHackMe Walkthrough
Learn why virtualisation powers modern IT, improving efficiency and safely isolating environments.
30 views
Daily Writeups
⤷ Title: Eschaton CTF 2026 — DFIR writeup
════════════════════════
𐀪 Author: Hadiramr
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 21:53:27 GMT
════════════════════════
⌗ Tags: #dfir #wireshark #rce_vulnerability #sql_injection #ctf
Medium
Eschaton CTF 2026 — DFIR writeup
My writeups for DFIR challenges from Eschaton CTF 2026 Qualifiers.
32 views
Daily Writeups
⤷ Title: Web3 Security 101: Bug Bounties vs. Audit Contests Explained
════════════════════════
𐀪 Author: Sherlock
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:42:49 GMT
════════════════════════
⌗ Tags: #web3_security #audit_contest #bug_bounty_tips #bug_bounty #web3_audit
Medium
Web3 Security 101: Bug Bounties vs. Audit Contests Explained
This post defines the characteristics and main use cases of both bug bounties and audit contests.
36 views
Daily Writeups
⤷ Title: What to do when you receive a vulnerability report: A step-by-step guide for maintainers
════════════════════════
𐀪 Author: Nancy Gariché
════════════════════════
ⴵ Time: Mon, 24 Mar 2025 16:00:33 +0000
════════════════════════
⌗ Tags: #Security #Supply chain security #Vulnerability research #CVE integration #cybersecurity #GitHub Security Lab #GitHub Security Tools #open source security #private vulnerability reporting #security advisories #vulnerability disclosure
The GitHub Blog
What to do when you receive a vulnerability report: A step-by-step guide for maintainers
A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.
22 views
Daily Writeups
⤷ Title: What does a cybersecurity researcher do and how do you get started?
════════════════════════
𐀪 Author: Nancy Gariché
════════════════════════
ⴵ Time: Wed, 29 Jan 2025 17:00:31 +0000
════════════════════════
⌗ Tags: #Security #Vulnerability research #application security #Career in Cybersecurity #cybersecurity #GitHub Security Lab #security research #Vulnerability Detection
The GitHub Blog
What does a cybersecurity researcher do and how do you get started?
Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
19 views
Daily Writeups
⤷ Title: Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:13:50 GMT
════════════════════════
⌗ Tags: #vulnerability_management #application_security #owasp_api_security_top_10 #api #api_penetration_testing
Medium
Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
18 views
Daily Writeups
⤷ Title: HacktheBox or TryHackme? My experiences with both
════════════════════════
𐀪 Author: Michael Harms
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:46:28 GMT
════════════════════════
⌗ Tags: #tryhackme #hackthebox #cybersecurity
Medium
HacktheBox or TryHackme? My experiences with both
I tried both cyber security training platforms. Both are have their unique ways to teach cyber security.
28 views
Daily Writeups
⤷ Title: Advanced Network Reconnaissance: Masscan & THC-IPv6
════════════════════════
𐀪 Author: mohandika
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 23:16:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #masscan #ethical_hacking #toolkit
Medium
Advanced Network Reconnaissance: Masscan & THC-IPv6
The Cybersecurity Toolkit: Masscan for Speed, THC-IPv6 for Security testing
38 views
Daily Writeups
⤷ Title: Top AI Tools for Red Teaming in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:36:44 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #AI #Cybersecurity #Garak #Giskard #HiddenLayer #Novee #Promptfoo #Red Team
Hackread
Top AI Tools for Red Teaming in 2026
AI red teaming pairs human insight with adaptive AI to test model behavior, expose hidden failure modes, and run continuous adversarial checks at scale.
38 views
Daily Writeups
⤷ Title: CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
Apache Answer flaw CVE-2026-24735 exposes deleted post history to unauthenticated users via API. Upgrade to v2.0.0 to stop data leaks.
19 views
Daily Writeups
⤷ Title: WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:40:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1498 #firewall #Fireware OS #LDAP injection #NCPVE_2025_0626 #network_security #Patch Alert #privilege escalation #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
15 views
Daily Writeups
⤷ Title: Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:37:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_22778 #FFmpeg #heap overflow #LLM Inference #Machine Learning Security #OpenCV #Python Imaging Library #Remote Code Execution #vLLM
Daily CyberSecurity
Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
Critical vLLM bug CVE-2026-22778 (CVSS 9.8) lets attackers hijack servers using malicious videos. Affects video model deployments. Patch to v0.14.1 now.
13 views
Daily Writeups
⤷ Title: Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:32:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Chrysalis #DLL side_loading #Elise #Lotus Blossom #Malware Analysis #Microsoft Warbird #notepad++ #Rapid7 #Spring Dragon #supply chain attack
Daily CyberSecurity
Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy "Chrysalis"
Lotus Blossom compromises Notepad++ infrastructure to deploy "Chrysalis" malware. Rapid7 reveals the group using Microsoft Warbird to evade detection.
26 views
Daily Writeups
⤷ Title: CISA Warns of Unpatched Avation & RISS Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:27:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Avation #CISA #Critical Infrastructure #CVE_2026_1341 #CVE_2026_1632 #Light Engine Pro #MOMA Seismic Station #OT Security #RISS SRL #Unresponsive Vendor
Daily CyberSecurity
CISA Warns of Unpatched Avation & RISS Critical Flaws
CISA warns Avation & RISS SRL are unresponsive to critical flaws (CVSS 9.8). Devices lack authentication. Isolate these unpatched systems now.
12 views