Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Reflected XSS into HTML context with nothing encoded|PortSwigger
════════════════════════
𐀪 Author: Asjamil
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:42:24 GMT
════════════════════════
⌗ Tags: #portswigger_lab #web_hacking #xss_vulnerability #cybersecurity
Medium
Reflected XSS into HTML context with nothing encoded|PortSwigger
This lab contains a simple reflected cross-site scripting vulnerability in the search functionality.
To solve the lab, perform a cross-site…
30 views
Daily Writeups
⤷ Title: 100$ Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:56:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #cybersecurity #bug_bounty #security
Medium
100$🤑 Bug — The Hidden Cost of “Unsigned” Uploads: Exploiting Cloudinary for Denial of Wallet
How a misconfigured third-party integration allowed unauthenticated attackers to host arbitrary files, map internal assets, and drain a…
48 views
Daily Writeups
⤷ Title: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:12:52 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire
34 views
Daily Writeups
⤷ Title: The ‘Must-Patch’ List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:45:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2021_22054 #CVE_2025_26399 #CVE_2026_1603 #cybersecurity #infosec #Ivanti EPM #Omnissa Workspace ONE #Patch Alert #SolarWinds
Daily CyberSecurity
The 'Must-Patch' List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
CISA adds three actively exploited flaws in SolarWinds, Ivanti, and Omnissa to its KEV catalog. Patch these critical enterprise vulnerabilities immediately.
32 views
Daily Writeups
⤷ Title: The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:23:19 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #BeatBanker #BTMOB RAT #Cryptocurrency Miner #cybersecurity #infosec #Kaspersky Labs #mobile security #Remote Access Trojan
Daily CyberSecurity
The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
Kaspersky uncovers BeatBanker, an Android malware in Brazil using an audio loop to evade detection while mining crypto and stealing banking credentials.
21 views
Daily Writeups
⤷ Title: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:13:15 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire
14 views
Daily Writeups
⤷ Title: Walkthrough TryHackMe: Menaklukkan Attacktive Directory
════════════════════════
𐀪 Author: NovanSetiadi
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:54:17 GMT
════════════════════════
⌗ Tags: #tryhackme #red_team #hacking
Medium
Walkthrough TryHackMe: Menaklukkan Attacktive Directory
1. Pendahuluan: Memahami Ekosistem Active Directory
15 views
Daily Writeups
⤷ Title: SMA Modern yang Mengutamakan Keamanan Siber dan Teknologi Digital
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:38:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity #penetration_testing
Medium
SMA Modern yang Mengutamakan Keamanan Siber dan Teknologi Digital
Teknologi telah menjadi elemen esensial dalam kehidupan manusia. Hampir semua aktivitas saat ini memanfaatkan sistem digital, mulai dari…
16 views
Daily Writeups
⤷ Title: How I Bypassed OTP Rate Limits and Earned $303 in a Bug Bounty Hunt
════════════════════════
𐀪 Author: Lokesh Soni
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:01:09 GMT
════════════════════════
⌗ Tags: #2fa #ethicle_hacking #web_security_testing #hacking #2fa_bypass
Medium
How I Bypassed OTP Rate Limits and Earned $303 in a Bug Bounty Hunt
hello gyussssss
20 views
Daily Writeups
⤷ Title: I Thought I Found 259 Exposed Systems in Bengaluru… I Was Wrong
════════════════════════
𐀪 Author: Russel Dsouza
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:59:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #shodan #osint #infosec #linux
Medium
I Thought I Found 259 Exposed Systems in Bengaluru… I Was Wrong
Originally published at russeldsouza.dev
23 views
Daily Writeups
⤷ Title: TryHackMe · Writeup — AD Basic Enumeration
════════════════════════
𐀪 Author: Beneditawidyasih
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:09:46 GMT
════════════════════════
⌗ Tags: #enumeration #tryhackme #tryhackme_writeup
Medium
TryHackMe · Writeup — AD Basic Enumeration
Menjelajahi Active Directory dari nol — dari anonymous SMB access hingga password spraying menggunakan CrackMapExec.
32 views
Daily Writeups
⤷ Title: “Mail2Shell”, Zero-Click Unauthenticated RCE in FreeScout (CVE-2026–28289), Patch Bypass Analysis
════════════════════════
𐀪 Author: Pandit Shivam
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:42:18 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #cybersecurity #cve_2026 #mail2shell #cve
Medium
“Mail2Shell”, Zero-Click Unauthenticated RCE in FreeScout (CVE-2026–28289), Patch Bypass Analysis
Introduction
45 views
Daily Writeups
⤷ Title: I Analyzed 10,000 SQL Injection Attacks — Here’s What They Actually Look Like
════════════════════════
𐀪 Author: John Hawkins
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:57:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #waf #sql_injection
62 views
Daily Writeups
⤷ Title: How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 16:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:37:36 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #Malware #Scams and Fraud #AllSecurity #BeaverTail #CChris Papathanasiou #Cyber Attack #Cybersecurity #Lazarus #LinkedIn #North Korea
Hackread
Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
Follow us on all major social media platforms @Hackread
29 views
Daily Writeups
⤷ Title: HTTP Responses: Status Codes and Security Vulnerabilities
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:28:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #cybersecurity #https #web_security
Medium
HTTP Responses: Status Codes and Security Vulnerabilities
In a penetration test (pentest), the most valuable intel usually isn’t sitting on the UI; it’s hiding in the raw HTTP responses. 200, 403…
26 views
Daily Writeups
⤷ Title: How to Install and Use Arachni for Web Vulnerability Scanning on Linux
════════════════════════
𐀪 Author: Ahmat Prayoga Sembiring
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:14:07 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #web_security #arachni #cybersecurity
Medium
How to Install and Use Arachni for Web Vulnerability Scanning on Linux
Ringkasan Eksekutif: Arachni adalah open source framework pemindaian keamanan aplikasi web berbasiskan Ruby yang dirancang untuk membantu…
31 views
Daily Writeups
⤷ Title: DLLHijacking Explained to a 10yr 0ld
════════════════════════
𐀪 Author: ghostvirus
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:18:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #privilege_escalation #cybersecurity #dll_hijacking #bug_bounty_writeup
Medium
DLLHijacking Explained to a 10yr 0ld
To really understand DLL hijacking, you need to understand how Windows actually loads a DLL internally. The key component is the Windows…
25 views
Daily Writeups
⤷ Title: Using AI to Review Bug Bounty Recon Results
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:54:08 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ai #cybersecurity #open_source
Medium
🤖🦞 Using AI to Review Bug Bounty Recon Results
🤖🦞 Using AI to Review Bug Bounty Recon Results
17 views