Daily Writeups
@Daily_Writeups
3.76K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.76K subscribers
Daily Writeups
⤷ Title: The Concierge Knows Too Much CTF Walkthrough (TryHackMe)
════════════════════════
𐀪 Author: Vanessa3
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:31:41 GMT
════════════════════════
⌗ Tags: #aisec #ctf #ethical_hacking #tryhackme #prompt_injection_attack
Medium
The Concierge Knows Too Much CTF Walkthrough (TryHackMe)
The Concierge knows too much lab is a beginner-friendly CTF provides a practical introduction to the Prompt Injection vulnerability.
20 views
Daily Writeups
⤷ Title: RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 12:32:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agent security #AI Infrastructure #CVE_2026_59726 #MCP Bridge #Prompt Injection #Ruflo Vulnerability #RufRoot #Unauthorized RCE
Information Security News
RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys
A single unauthenticated POST request was sufficient to open a command shell inside one of the most widely deployed AI agent orchestration platforms on GitHub. From that foothold, an attacker coul…
10 views
Daily Writeups
⤷ Title: Analyzing GitHub Actions workflows at scale
════════════════════════
𐀪 Author: Kulkan Security
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:44:03 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #penetration_testing #supply_chain_security #vulnerability #github_actions
Medium
Analyzing GitHub Actions workflows at scale
This research project was born after reading many news articles about supply chain attacks and highly used packages being compromised to…
10 views
Daily Writeups
⤷ Title: AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 06:46:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agent Escape #AI safety #AISI Cyber Test #Anthropic Mythos #GPT_5.6 Sol #Prompt Injection #Sandbox Escape #supply chain attack
Information Security News
AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
A routine evaluation of advanced AI models’ offensive cybersecurity capabilities unexpectedly reached into the live internet. One agent attempted to inject malicious code into a public open-…
10 views
Daily Writeups
⤷ Title: Google ADK Vulnerability Enables Agent to Agent Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 07:08:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #cybersecurity #google #Google ADK Vulnerability #Prompt Injection
Information Security News
Google ADK Vulnerability Enables Agent to Agent Attacks
The Emergence of Agent-Against-Agent Exploits An AI agent can deceptively trigger another agent with elevated privileges. Consequently, an attacker can exploit this mechanism to compromise a softw…
10 views
Daily Writeups
⤷ Title: Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 11:00:13 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #ai_security #bug_bounty #cybersecurity #artificial_intelligence
Medium
Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
Direct injection and jailbreaks keep getting closed as informational. The findings that pay chain a hidden instruction to a real…
15 views
Daily Writeups
⤷ Title: Hacker Holidays 2026: Day 13 Walkthrough (The Guestbook)
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 08:42:36 GMT
════════════════════════
⌗ Tags: #ai #prompt_injection #tryhackme #hacker_holidays_2026 #cybersecurity
Medium
Hacker Holidays 2026: Day 13 Walkthrough (The Guestbook)
An AI concierge read every guestbook entry as an instruction. We disguised shell commands as hotel reviews. When the output was redacted…
23 views
Daily Writeups
⤷ Title: Solving TryHackMe’s Hacker Holidays 2026, Day 1: ‘The Concierge Knows Too Much
════════════════════════
𐀪 Author: Souhardya
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 17:31:14 GMT
════════════════════════
⌗ Tags: #osint #prompt_injection_attack #artificial_intelligence #tryhackme #cybersecurity
Medium
Solving TryHackMe’s Hacker Holidays 2026, Day 1: ‘The Concierge Knows Too Much
A beginner-friendly walkthrough of how identity spoofing against a poorly-guarded AI assistant led to an internal secret it was told never…
9 views
Daily Writeups
⤷ Title: Day 13 — The Guestbook Writeup | Hacker Holidays 2026
════════════════════════
𐀪 Author: Piyush Manghnani
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 05:42:00 GMT
════════════════════════
⌗ Tags: #tryhackme #hacker_holidays_2026 #tryhackme_writeup #the_guestbook #prompt_engineering
Medium
Hacker Holidays Day 13 — The Guestbook
Abusing VERA's Trust: From Prompt Injection to Manager Override
20 views
Daily Writeups
⤷ Title: Byte Lotus, Four Ways: A Hacker Holidays 2026 Writeup
════════════════════════
𐀪 Author: Rasaq Ayomide
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 14:59:05 GMT
════════════════════════
⌗ Tags: #ctf_writeup #prompt_injection_attack #osint #tryhackme #cybersecurity
Medium
Byte Lotus, Four Ways: A Hacker Holidays 2026 Writeup
Four TryHackMe rooms in one sitting. A hashing OSINT trail, a FUEL CMS remote code execution, and two AI concierges that talked when they…
16 views