Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:13:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #CodeAnt AI #CVE_2026_29000 #identity theft #Java security #JSON Web Encryption #JWE #JWT #pac4j_jwt #RSA #Tech News 2026
Penetration Testing Tools
The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
A critical vulnerability has been unearthed within the widely utilized Java authentication library, pac4j-jwt, empowering a malicious actor
21 views
Daily Writeups
⤷ Title: Digital Reconnaissance: Iran-Aligned Hackers Hijack Middle Eastern Surveillance Grids Ahead of Kinetic Strikes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:02:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Check Point Research #CVE_2021_33044 #CVE_2025_34067 #cyber_kinetic warfare #Dahua #Hikvision #IP camera hacking #Iran #Israel #Middle East conflict 2026 #Tech News 2026
Penetration Testing Tools
Digital Reconnaissance: Iran-Aligned Hackers Hijack Middle Eastern Surveillance Grids Ahead of Kinetic Strikes
Researchers at Check Point have disclosed that since the eruption of hostilities on February 28th, a coalition of
9 views
Daily Writeups
⤷ Title: The AI Trap: How Bing and GitHub Accidentally Boosted the “OpenClaw” Infostealer Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:00:19 +0000
════════════════════════
⌗ Tags: #Malware #AI_augmented search #Bing AI #Cyberespionage #GhostSocks #Github #Huntress #malicious repository #OpenClaw #Stealth Packer #supply chain attack #Tech News 2026 #Vidar infostealer
Penetration Testing Tools
The AI Trap: How Bing and GitHub Accidentally Boosted the "OpenClaw" Infostealer Campaign
Novel artificial intelligence instruments are increasingly being co-opted into the arsenals of cybercriminals. A recent paradigm of this
23 views
Daily Writeups
⤷ Title: The “Coruna” Code Clash: Kaspersky Challenges Google Over the Origins of a Multi-Million Dollar iOS Arsenal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:59:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Coruna #CVE_2023_32434 #CVE_2024_23222 #Google GTIG #iOS exploit #iPhone security #kaspersky #Operation Triangulation #surveillance software #Tech News 2026 #threat intelligence #zero_day market
Penetration Testing Tools
The "Coruna" Code Clash: Kaspersky Challenges Google Over the Origins of a Multi-Million Dollar iOS Arsenal
Kaspersky Lab has categorically repudiated the hypothesis that the iPhone exploit framework, recently delineated by Google, was engineered
14 views
Daily Writeups
⤷ Title: Network Decapitation: Cisco Warns of Active SD-WAN Zero-Day Exploits and Chained Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA Emergency Directive 26_03 #Cisco Catalyst SD_WAN #Cisco Secure Firewall #CVE_2026_20122 #CVE_2026_20127 #CVE_2026_20128 #network security #Tech News 2026 #vManage #zero_day
12 views
Daily Writeups
⤷ Title: The Fall of a Phishing Giant: How International Law Enforcement Crushed the Tycoon 2FA Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:25:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ATO Jumping #cybercrime takedown #Europol #MFA Bypass #Microsoft 365 security #Phishing_as_a_Service #Saad Afridi #Session Hijacking #Storm_1747 #Tech News 2026 #Tycoon 2FA
Penetration Testing Tools
The Fall of a Phishing Giant: How International Law Enforcement Crushed the Tycoon 2FA Empire
An international law enforcement operation has successfully dismantled Tycoon 2FA, one of the most formidable phishing-as-a-service platforms in
11 views
Daily Writeups
⤷ Title: The “Phantom” Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:11:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #AllowOverride #apache #CVE_2026_28289 #FreeScout #helpdesk security #Laravel #OX Research #PHP #RCE #Tech News 2026 #zero_click exploit #zero_width space
Penetration Testing Tools
The "Phantom" Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
In a recent dossier, OX Research delineated how a mundane email dispatched to a corporate address can precipitate
9 views
Daily Writeups
⤷ Title: Business Logic Bug — Bypassing Gift Card Limits Using a Single Card
════════════════════════
𐀪 Author: rootxJeet
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 10:13:03 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #business_logic #cybersecurity
Medium
Business Logic Bug — Bypassing Gift Card Limits Using a Single Card
Most people think hacking is about complex payloads, heavy scripts, or finding some crazy technical vulnerability. But sometimes, the…
7 views
Daily Writeups
⤷ Title: SMA dengan Kurikulum IT yang Paling Diperlukan oleh Industri
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 09:58:05 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #ethical_hacking
Medium
SMA dengan Kurikulum IT yang Paling Diperlukan oleh Industri
Beberapa tahun yang lalu, mempelajari teknologi mungkin hanya dianggap sebagai sebuah hobi. Namun saat ini, teknologi telah menjadi elemen…
9 views
Daily Writeups
⤷ Title: In the current cybersecurity landscape, the “Detection Gap” is the single greatest risk to business…
════════════════════════
𐀪 Author: Sathvik Bellave
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 09:50:01 GMT
════════════════════════
⌗ Tags: #drm #eu_mdr #cisco_managed_services #cyber_security_solutions #infosec
Medium
In the current cybersecurity landscape, the “Detection Gap” is the single greatest risk to business…
As we move through 2026, the industry is shifting away from simple monitoring toward a more proactive, “action-first” model. Here is why…
15 views
Daily Writeups
⤷ Title: I Searched 5 Banks for Leaked Credentials. Here’s What I Found.
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 09:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #technology #infosec #data_breach
Medium
I Searched 5 Banks for Leaked Credentials. Here’s What I Found.
Banks spend millions on security. Firewalls. SOCs. Red teams. Compliance audits.
20 views
Daily Writeups
⤷ Title: From Curiosity to CVE: Discovering a Kiosk Breakout Vulnerability in Technogym Fitness Equipment
════════════════════════
𐀪 Author: Asparuh Stefanov
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 09:31:17 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cve_2025_67195 #vulnerability_research #cybersecurity
Medium
From Curiosity to CVE: Discovering a Kiosk Breakout Vulnerability in Technogym Fitness Equipment
How a moment of curiosity at the gym led to a responsible security disclosure, a CVE-2025–67195 assignment, and a place in Technogym’s…
17 views
Daily Writeups
⤷ Title: Monitoring AWS Services
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 10:46:27 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #aws_s3 #tryhackme_writeup #aws #tryhackme
Medium
Monitoring AWS Services
Discover common attacks on AWS services and learn how to protect against them.
14 views
Daily Writeups
⤷ Title: Step-by-Step AD: Basic Enumeration menggunakan TryHackMe
════════════════════════
𐀪 Author: Vyrasyaa
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 09:44:59 GMT
════════════════════════
⌗ Tags: #tryhackme
Medium
Step-by-Step AD: Basic Enumeration menggunakan TryHackMe
Hello everyone! Kali ini saya akan membagikan pengalaman saya menyelesaikan tantangan Active Directory: Basic Enumeration di Tryhackme.
28 views
Daily Writeups
⤷ Title: Comprehensive Guide to Preventing SQL Injection
════════════════════════
𐀪 Author: Shamir Ajmir Khan
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 10:35:49 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #web_development #cybersecurity
Medium
Comprehensive Guide to Preventing SQL Injection
Table of Contents
46 views
Daily Writeups
⤷ Title: The MSP Guide to Using AI-Powered Risk Management to Scale Cybersecurity
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 15:53:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Cisco Patches 48 Firewall Vulnerabilities with Two CVSS 10 Flaws
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 11:33:29 +0000
════════════════════════
⌗ Tags: #Security #Cisco #CVSS #Cybersecurity #firewall #Vulnerability
Hackread
Cisco Patches 48 Firewall Vulnerabilities with Two CVSS 10 Flaws
Follow us on all social media platforms @Hackread
30 views
Daily Writeups
⤷ Title: Unlimited Shopping: Exploiting a Cart Logic Flaw to Bypass Product Limits
════════════════════════
𐀪 Author: Raslanco
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 12:45:12 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #information_security #bug_bounty_tips #bug_bounty #bugbounty_writeup
Medium
Unlimited Shopping: Exploiting a Cart Logic Flaw to Bypass Product Limits
## Introduction
22 views
Daily Writeups
⤷ Title: Path Traversal Vulnerability Explained: The Hidden Door Inside Web Applications
════════════════════════
𐀪 Author: Ishant Gupta
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 12:29:49 GMT
════════════════════════
⌗ Tags: #hacking #web_security #web_development #cybersecurity #bug_bounty
Medium
Path Traversal Vulnerability Explained: The Hidden Door Inside Web Applications
How a simple file request can expose sensitive server data and why this vulnerability still appears in modern applications.
18 views
Daily Writeups
⤷ Title: Blind XSS Unleashed: Automating Payloads to Catch Vulnerabilities You Can’t See
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 11:50:35 GMT
════════════════════════
⌗ Tags: #technology #penetration_testing #bug_bounty #hacking #bug_bounty_tips
Medium
Blind XSS Unleashed: Automating Payloads to Catch Vulnerabilities You Can’t See
How bug hunters use automated payloads and smart recon to uncover hidden XSS vulnerabilities inside admin panels and internal dashboards.
23 views