Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: “Dormant” Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:07:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bash Injection #CVE_2026_1281 #CVE_2026_1340 #Ivanti EPMM #mobile security #Nezha Agent #Patch Alert #Remote Code Execution #Unit 42 #zero_day
Daily CyberSecurity
"Dormant" Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
Ivanti EPMM under attack via zero-days CVE-2026-1281 & 1340. Hackers use bash scripts to plant dormant backdoors. Patch immediately.
18 views
Daily Writeups
⤷ Title: CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Security #CISA #CVE_2008_0015 #CVE_2020_7796 #CVE_2024_7694 #CVE_2026_2441 #KEV Catalog #Patch Alert #Windows XP #zero_day
Daily CyberSecurity
CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
CISA adds 4 flaws to KEV: Ancient Windows ActiveX bug (CVE-2008-0015) & new Chrome zero-day (CVE-2026-2441). Patch now to prevent exploitation.
18 views
Daily Writeups
⤷ Title: TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:06:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnerability #bug_bounty #hacking #ctf
Medium
TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
This post is a complete VulnNet walkthrough, aimed at CTF players and OSCP students who want more than just copy‑paste commands.
19 views
Daily Writeups
⤷ Title: sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #hacking #cybersecurity #technology
Medium
sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
Learn how to use sslscan to identify encryption flaws, obsolete protocols, and hidden assets in your web security audits.
24 views
Daily Writeups
⤷ Title: Exam Review: Certified AppSec Practitioner (CAP)
════════════════════════
𐀪 Author: Mrittika Debnath
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 19:06:20 GMT
════════════════════════
⌗ Tags: #information_security #application_security #cybersecurity
Medium
Exam Review: Certified AppSec Practitioner (CAP)
I recently appeared for the Certified AppSec Practitioner (CAP) exam by SecOps Group and successfully passed with a meritorious score of…
32 views
Daily Writeups
⤷ Title: RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 22:58:20 GMT
════════════════════════
⌗ Tags: #pentesting #malware #hacking #red_team #cybersecurity
Medium
RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
Welcome to this new Medium post, this one it’s the continuation of a previous post from some weeks ago where we leverage the Remote…
30 views
Daily Writeups
⤷ Title: INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 23:44:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #programming #cybersecurity #coding #ctf
Medium
INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
33 views
Daily Writeups
⤷ Title: Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:47:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2025_33239 #CVE_2025_33240 #infosec #LLM Training #machine_learning #Megatron Bridge #nvidia #privilege escalation #Tech News 2026
Daily CyberSecurity
Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
NVIDIA has released a critical software update for its Megatron Bridge, a key component used in training large language models (LLMs). The bulletin discloses two high-severity vulnerabilities hidd…
36 views
Daily Writeups
⤷ Title: Elon Musk’s Grok Faces “Large-Scale” EU Probe Over Deepfake Imagery and Data Rights
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:19:38 +0000
════════════════════════
⌗ Tags: #Technology #Deepfakes #Digital Services Act #Elon Musk #EU Data Protection Commission #GDPR #Grok #non_consensual intimate imagery #privacy by design #Tech News 2026 #X headquarters raid #xAI
Daily CyberSecurity
Elon Musk’s Grok Faces “Large-Scale” EU Probe Over Deepfake Imagery and Data Rights
Following the precedents set by France and the United Kingdom, the European Union’s primary privacy regulator has formally inaugurated a “large-scale” investigation into Elon Mus…
20 views
Daily Writeups
⤷ Title: The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:16:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #AI HAT+ #Eben Upton #Edge Inference #Llama 3 #London Stock Exchange #Mistral #OpenClaw #Raspberry Pi #Raspberry Pi 5 #single_board computer #stock market 2026 #Tech News
Daily CyberSecurity
The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
A 42% stock surge and the rise of "Edge Inference" have transformed the Raspberry Pi into the premier low-cost vessel for autonomous AI agents in 2026.
23 views
Daily Writeups
⤷ Title: Beyond the Chatbot: Google I/O 2026 to Unveil the “Agentic” Future of Android 17
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:13:20 +0000
════════════════════════
⌗ Tags: #Technology #AI agent #Android 17 #Android XR #developer conference #Gemini 3 #Generative AI #Google I/O 2026 #Google puzzles #Shoreline Amphitheatre #Tech News 2026
Daily CyberSecurity
Beyond the Chatbot: Google I/O 2026 to Unveil the "Agentic" Future of Android 17
Google I/O 2026 kicks off May 19! Discover how Gemini 3 and Android 17 are turning your phone into a proactive AI concierge. The era of the agent is here.
29 views
Daily Writeups
⤷ Title: Authorisation BypassVulnerability Analysis in DVWA (Low to Impossible)
════════════════════════
𐀪 Author: Narathama Firmansyah Putra
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:37:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #dvwa #authentication_bypass #penetration_testing
Medium
Authorisation BypassVulnerability Analysis in DVWA (Low to Impossible)
Introduction Authorisation Bypass adalah kondisi ketika seorang pengguna berhasil mengakses halaman atau fitur yang seharusnya tidak…
31 views
Daily Writeups
⤷ Title: TryHeartMe | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Munirah
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 02:11:41 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf_writeup #tryhackme_writeup #ctf #tryhackme
Medium
TryHeartMe | TryHackMe Walkthrough
A writeup for TryHeartMe — A Web CTF Walkthrough.
37 views
Daily Writeups
⤷ Title: THM — SOC Simulator -> Phishing Unfolding
════════════════════════
𐀪 Author: EduKayky
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:44:21 GMT
════════════════════════
⌗ Tags: #information_security #security #tryhackme #ctf_writeup #blue_team
Medium
THM — SOC Simulator -> Phishing Unfolding
> Resumo:
28 views
Daily Writeups
⤷ Title: What Really Happens When Your PHP App Gets XSS — And You Don’t Even Notice
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 02:41:22 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #xss_attack #php #php_development #backend
Medium
What Really Happens When Your PHP App Gets XSS — And You Don’t Even Notice
Hook: The Bug That Doesn’t Look Like a Bug
40 views
Daily Writeups
⤷ Title: Unstable Twin WriteUP TryHackMe
════════════════════════
𐀪 Author: cat0x01
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 03:52:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #tryhackme #bug_bounty #ctf
Medium
Unstable Twin WriteUP TryHackMe
42 views
Daily Writeups
⤷ Title: One-Click Account Takeover via Deep Link Token Auto-Append
════════════════════════
𐀪 Author: BaymaxPop23
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 03:52:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #deep_link_android #android_security #penetration_testing
Medium
One-Click Account Takeover via Deep Link Token Auto-Append
When an Android app silently attaches authentication tokens to every URL opened through a deep link, a single click is all it takes.
50 views
Daily Writeups
⤷ Title: Building a Vulnerable Lab Environment (Metasploitable Setup)
════════════════════════
𐀪 Author: Br4in4rd
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 04:46:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #challenge #technology #hacking #metasploit
Medium
Building a Vulnerable Lab Environment (Metasploitable Setup)
DAY 3 OF 50
50 DAYS CYBERSECURITY LABS CHALLENGE
48 views
Daily Writeups
⤷ Title: SOC Fundamentals — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 04:36:27 GMT
════════════════════════
⌗ Tags: #cybersecurity_101 #tryhackme_writeup #tryhackme #soc_fundamentals #tryhackme_walkthrough
Medium
SOC Fundamentals — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: SOC Fundamentals
Room URL: https://tryhackme.com/room/socfundamentals
Difficulty: Easy
Please attempt the room…
56 views
Daily Writeups
⤷ Title: From Beginner to Finding My First Critical SQL Injection in a Real VAPT Project
════════════════════════
𐀪 Author: Indrajitchavan
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 05:37:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #sql_injection #ethical_hacking #cybersecurity #web_security
Medium
From Beginner to Finding My First Critical SQL Injection in a Real VAPT Project
I want to start this by saying something honestly.
55 views
Daily Writeups
⤷ Title: Bug Bounty Is Not About Bugs
════════════════════════
𐀪 Author: Talyaji | Bug Bounty Hunter | $20K+ Earnings
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 05:07:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #money #bugs #bug_bounty #ethical_hacking
Medium
Bug Bounty Is Not About Bugs 🪲
A Beginner Guide to the Right Mindset
47 views