Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Introduction to Machine: Funbox 4
════════════════════════
𐀪 Author: Abhinavmpu
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 06:15:31 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
Introduction to Machine: Funbox 4
Funbox 4 is a beginner-level vulnerable virtual machine designed for learning ethical hacking and penetration testing. It is usually…
38 views
Daily Writeups
⤷ Title: Introduction to Machine: Funbox 4
════════════════════════
𐀪 Author: Akhilkulkarni
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 05:45:07 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
Introduction to Machine: Funbox 4
Funbox 4 is a beginner-friendly vulnerable virtual machine used for practicing ethical hacking and penetration testing.
It is commonly…
29 views
Daily Writeups
⤷ Title: SUDO MAKE ME A SANDWICH — PicoCTF 2026
════════════════════════
𐀪 Author: SourceFul Space
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 05:07:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #picoctf_2026 #ethical_hacking #sudo_make_me_a_sandwich #picoctf
Medium
SUDO MAKE ME A SANDWICH — PicoCTF 2026
Hey everyone, this is a write-up for the PicoCTF 2026 challenge room “Sudo Make Me a Sandwich.” In this room, we are given SSH login…
36 views
Daily Writeups
⤷ Title: Bypassing SSL Pinning in Flutter Android Apps Distributed as Split APKs
════════════════════════
𐀪 Author: Bharathkannan
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 05:42:51 GMT
════════════════════════
⌗ Tags: #android_pentesting #bug_bounty_writeup #reverse_engineering #hacking
Medium
Bypassing SSL Pinning in Flutter Android Apps Distributed as Split APKs
A practical guide for security researchers and penetration testers on intercepting HTTPS traffic from Flutter applications packaged with…
48 views
Daily Writeups
⤷ Title: Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:47:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:47:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Dutch Intelligence Warning: Russian State Actors Targeting Signal and WhatsApp
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:35:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #AIVD #cyber_espionage #cybersecurity #infosec #MIVD #Signal #social engineering #threat intelligence #WhatsApp
Daily CyberSecurity
Dutch Intelligence Warning: Russian State Actors Targeting Signal and WhatsApp
Dutch intelligence (MIVD/AIVD) warns of a global campaign using social engineering to silently hijack Signal and WhatsApp accounts of high-profile targets.
21 views
Daily Writeups
⤷ Title: Critical Alert: SAP’s Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:20:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2019_17571 #CVE_2026_27685 #cybersecurity #Enterprise Security #infosec #Insecure Deserialization #Patch Tuesday #Remote Code Execution #SAP Security #Vulnerability
Daily CyberSecurity
Critical Alert: SAP's Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
SAP's latest security update addresses 15 flaws, including critical RCE (CVE-2019-17571) and deserialization (CVE-2026-27685) vulnerabilities. Patch now.
16 views
Daily Writeups
⤷ Title: Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:06:40 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Camaro Dragon #Chinese APT #Cobalt Strike #Cyberespionage #DLL hijacking #Malware Analysis #Middle East #PlugX #Qatar #threat intelligence
Daily CyberSecurity
Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX
Chinese APTs like Camaro Dragon are targeting Qatar with PlugX malware and Cobalt Strike, weaponizing Middle East tensions for cyberespionage.
14 views
Daily Writeups
⤷ Title: OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:26:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #owasp #application_security
Medium
OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
Vulnerability Overview
11 views
Daily Writeups
⤷ Title: OWASP Juice Shop — User Enumeration via Forgot Password
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:11:53 GMT
════════════════════════
⌗ Tags: #application_security #web_security #cybersecurity #owasp #penetration_testing
Medium
OWASP Juice Shop — User Enumeration via Forgot Password
This writeup documents a user enumeration vulnerability identified during a security assessment of OWASP Juice Shop. The finding was…
18 views
Daily Writeups
⤷ Title: Iranian APT MuddyWater Deploys “Dindoor” Backdoor: Inside a New Cyber-Espionage Campaign
════════════════════════
𐀪 Author: Raoelinirina Sergio
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:29:28 GMT
════════════════════════
⌗ Tags: #cyber_threat #hacking #threat_intelligence #cybersecurity #malware_analysis
Medium
Iranian APT MuddyWater Deploys “Dindoor” Backdoor: Inside a New Cyber-Espionage Campaign
Threat Intelligence Analysis — Malware, Infrastructure, MITRE ATT&CK Mapping, and Detection Guidance
22 views
Daily Writeups
⤷ Title: Defense in Depth
════════════════════════
𐀪 Author: Sujon Al Mamun
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 06:56:41 GMT
════════════════════════
⌗ Tags: #defense_in_depth #compliance #grc #cybersecurity #infosec
Medium
Defense in Depth 🏰
If a hacker gets past your password, what stops them next? If your answer is “nothing,” you’re in trouble! In GRC, we never rely on just…
15 views
Daily Writeups
⤷ Title: Learning Wi-Fi Packet Sniffing at Home: My First Kali Linux Wireless Lab
════════════════════════
𐀪 Author: Thewatchdog13
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:02:03 GMT
════════════════════════
⌗ Tags: #wifi #cybersecurity #penetration_testing #homelab #ethical_hacking
Medium
Learning Wi-Fi Packet Sniffing at Home: My First Kali Linux Wireless Lab
As someone learning cybersecurity and wireless security, I wanted to experiment with packet sniffing in a controlled, safe environment…
18 views
Daily Writeups
⤷ Title: HackTheBox: Facts — Writeup
════════════════════════
𐀪 Author: Ryan Ryan
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #writeup #web_hacking #penetration_testing #cybersecurity #red_team
Medium
HackTheBox: Facts — Writeup
Facts is a Linux machine from Hack The Box that walks through several stages of an attack, including web enumeration, CMS exploitation, AWS…
24 views
Daily Writeups
⤷ Title: Monitoring AWS Workloads — Part 2
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:03:30 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #aws_lambda #tryhackme_writeup #tryhackme #splunk
Medium
Monitoring AWS Workloads — Part 2
Learn how apps run in AWS and what you should know to effectively monitor them.
26 views
Daily Writeups
⤷ Title: The Quantum Threat to Classic VAPT: Moving Beyond the “Classical” Perimeter
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:37:51 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #cyber_security_awareness #information_security #ethical_hacking
Medium
The Quantum Threat to Classic VAPT: Moving Beyond the “Classical” Perimeter
In the world of cybersecurity, we often treat the strength of encryption as a constant. As a VAPT analyst, you likely see an RSA-2048…
17 views
Daily Writeups
⤷ Title: Cyber Security Course Eligibility: Who Can Learn Cyber Security and Start a Career in Digital…
════════════════════════
𐀪 Author: EINITIAL24
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:19:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_courses #ethical_hacking #cybersecurity_training #cyber_security_solutions
Medium
Cyber Security Course Eligibility: Who Can Learn Cyber Security and Start a Career in Digital…
In today’s digital world, almost everything runs on the internet. Businesses store data online, people manage finances digitally, and…
18 views
Daily Writeups
⤷ Title: Reflected XSS into HTML context with nothing encoded|PortSwigger
════════════════════════
𐀪 Author: Asjamil
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:42:24 GMT
════════════════════════
⌗ Tags: #portswigger_lab #web_hacking #xss_vulnerability #cybersecurity
Medium
Reflected XSS into HTML context with nothing encoded|PortSwigger
This lab contains a simple reflected cross-site scripting vulnerability in the search functionality.
To solve the lab, perform a cross-site…
30 views
Daily Writeups
⤷ Title: 100$ Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:56:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #cybersecurity #bug_bounty #security
Medium
100$🤑 Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
How a misconfigured third-party integration allowed unauthenticated attackers to host arbitrary files, map internal assets, and drain a…
48 views
Daily Writeups
⤷ Title: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:12:52 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire
34 views