Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Dutch Intelligence Warning: Russian State Actors Targeting Signal and WhatsApp
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:35:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #AIVD #cyber_espionage #cybersecurity #infosec #MIVD #Signal #social engineering #threat intelligence #WhatsApp
Daily CyberSecurity
Dutch Intelligence Warning: Russian State Actors Targeting Signal and WhatsApp
Dutch intelligence (MIVD/AIVD) warns of a global campaign using social engineering to silently hijack Signal and WhatsApp accounts of high-profile targets.
21 views
Daily Writeups
⤷ Title: Critical Alert: SAP’s Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:20:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2019_17571 #CVE_2026_27685 #cybersecurity #Enterprise Security #infosec #Insecure Deserialization #Patch Tuesday #Remote Code Execution #SAP Security #Vulnerability
Daily CyberSecurity
Critical Alert: SAP's Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
SAP's latest security update addresses 15 flaws, including critical RCE (CVE-2019-17571) and deserialization (CVE-2026-27685) vulnerabilities. Patch now.
16 views
Daily Writeups
⤷ Title: Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:06:40 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Camaro Dragon #Chinese APT #Cobalt Strike #Cyberespionage #DLL hijacking #Malware Analysis #Middle East #PlugX #Qatar #threat intelligence
Daily CyberSecurity
Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX
Chinese APTs like Camaro Dragon are targeting Qatar with PlugX malware and Cobalt Strike, weaponizing Middle East tensions for cyberespionage.
14 views
Daily Writeups
⤷ Title: OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:26:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #owasp #application_security
Medium
OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
Vulnerability Overview
11 views
Daily Writeups
⤷ Title: OWASP Juice Shop — User Enumeration via Forgot Password
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:11:53 GMT
════════════════════════
⌗ Tags: #application_security #web_security #cybersecurity #owasp #penetration_testing
Medium
OWASP Juice Shop — User Enumeration via Forgot Password
This writeup documents a user enumeration vulnerability identified during a security assessment of OWASP Juice Shop. The finding was…
18 views
Daily Writeups
⤷ Title: Iranian APT MuddyWater Deploys “Dindoor” Backdoor: Inside a New Cyber-Espionage Campaign
════════════════════════
𐀪 Author: Raoelinirina Sergio
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:29:28 GMT
════════════════════════
⌗ Tags: #cyber_threat #hacking #threat_intelligence #cybersecurity #malware_analysis
Medium
Iranian APT MuddyWater Deploys “Dindoor” Backdoor: Inside a New Cyber-Espionage Campaign
Threat Intelligence Analysis — Malware, Infrastructure, MITRE ATT&CK Mapping, and Detection Guidance
22 views
Daily Writeups
⤷ Title: Defense in Depth
════════════════════════
𐀪 Author: Sujon Al Mamun
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 06:56:41 GMT
════════════════════════
⌗ Tags: #defense_in_depth #compliance #grc #cybersecurity #infosec
Medium
Defense in Depth 🏰
If a hacker gets past your password, what stops them next? If your answer is “nothing,” you’re in trouble! In GRC, we never rely on just…
15 views
Daily Writeups
⤷ Title: Learning Wi-Fi Packet Sniffing at Home: My First Kali Linux Wireless Lab
════════════════════════
𐀪 Author: Thewatchdog13
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:02:03 GMT
════════════════════════
⌗ Tags: #wifi #cybersecurity #penetration_testing #homelab #ethical_hacking
Medium
Learning Wi-Fi Packet Sniffing at Home: My First Kali Linux Wireless Lab
As someone learning cybersecurity and wireless security, I wanted to experiment with packet sniffing in a controlled, safe environment…
18 views
Daily Writeups
⤷ Title: HackTheBox: Facts — Writeup
════════════════════════
𐀪 Author: Ryan Ryan
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #writeup #web_hacking #penetration_testing #cybersecurity #red_team
Medium
HackTheBox: Facts — Writeup
Facts is a Linux machine from Hack The Box that walks through several stages of an attack, including web enumeration, CMS exploitation, AWS…
24 views
Daily Writeups
⤷ Title: Monitoring AWS Workloads — Part 2
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:03:30 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #aws_lambda #tryhackme_writeup #tryhackme #splunk
Medium
Monitoring AWS Workloads — Part 2
Learn how apps run in AWS and what you should know to effectively monitor them.
26 views
Daily Writeups
⤷ Title: The Quantum Threat to Classic VAPT: Moving Beyond the “Classical” Perimeter
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:37:51 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #cyber_security_awareness #information_security #ethical_hacking
Medium
The Quantum Threat to Classic VAPT: Moving Beyond the “Classical” Perimeter
In the world of cybersecurity, we often treat the strength of encryption as a constant. As a VAPT analyst, you likely see an RSA-2048…
17 views
Daily Writeups
⤷ Title: Cyber Security Course Eligibility: Who Can Learn Cyber Security and Start a Career in Digital…
════════════════════════
𐀪 Author: EINITIAL24
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:19:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_courses #ethical_hacking #cybersecurity_training #cyber_security_solutions
Medium
Cyber Security Course Eligibility: Who Can Learn Cyber Security and Start a Career in Digital…
In today’s digital world, almost everything runs on the internet. Businesses store data online, people manage finances digitally, and…
18 views
Daily Writeups
⤷ Title: Reflected XSS into HTML context with nothing encoded|PortSwigger
════════════════════════
𐀪 Author: Asjamil
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:42:24 GMT
════════════════════════
⌗ Tags: #portswigger_lab #web_hacking #xss_vulnerability #cybersecurity
Medium
Reflected XSS into HTML context with nothing encoded|PortSwigger
This lab contains a simple reflected cross-site scripting vulnerability in the search functionality.
To solve the lab, perform a cross-site…
30 views
Daily Writeups
⤷ Title: 100$ Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:56:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #cybersecurity #bug_bounty #security
Medium
100$🤑 Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
How a misconfigured third-party integration allowed unauthenticated attackers to host arbitrary files, map internal assets, and drain a…
48 views
Daily Writeups
⤷ Title: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:12:52 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire
34 views
Daily Writeups
⤷ Title: The ‘Must-Patch’ List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:45:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2021_22054 #CVE_2025_26399 #CVE_2026_1603 #cybersecurity #infosec #Ivanti EPM #Omnissa Workspace ONE #Patch Alert #SolarWinds
Daily CyberSecurity
The 'Must-Patch' List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
CISA adds three actively exploited flaws in SolarWinds, Ivanti, and Omnissa to its KEV catalog. Patch these critical enterprise vulnerabilities immediately.
32 views
Daily Writeups
⤷ Title: The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:23:19 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #BeatBanker #BTMOB RAT #Cryptocurrency Miner #cybersecurity #infosec #Kaspersky Labs #mobile security #Remote Access Trojan
Daily CyberSecurity
The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
Kaspersky uncovers BeatBanker, an Android malware in Brazil using an audio loop to evade detection while mining crypto and stealing banking credentials.
21 views
Daily Writeups
⤷ Title: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:13:15 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire
14 views
Daily Writeups
⤷ Title: Walkthrough TryHackMe: Menaklukkan Attacktive Directory
════════════════════════
𐀪 Author: NovanSetiadi
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:54:17 GMT
════════════════════════
⌗ Tags: #tryhackme #red_team #hacking
Medium
Walkthrough TryHackMe: Menaklukkan Attacktive Directory
1. Pendahuluan: Memahami Ekosistem Active Directory
15 views
Daily Writeups
⤷ Title: SMA Modern yang Mengutamakan Keamanan Siber dan Teknologi Digital
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:38:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity #penetration_testing
Medium
SMA Modern yang Mengutamakan Keamanan Siber dan Teknologi Digital
Teknologi telah menjadi elemen esensial dalam kehidupan manusia. Hampir semua aktivitas saat ini memanfaatkan sistem digital, mulai dari…
16 views
Daily Writeups
⤷ Title: How I Bypassed OTP Rate Limits and Earned $303 in a Bug Bounty Hunt
════════════════════════
𐀪 Author: Lokesh Soni
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:01:09 GMT
════════════════════════
⌗ Tags: #2fa #ethicle_hacking #web_security_testing #hacking #2fa_bypass
Medium
How I Bypassed OTP Rate Limits and Earned $303 in a Bug Bounty Hunt
hello gyussssss
20 views