Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: “Mail2Shell”, Zero-Click Unauthenticated RCE in FreeScout (CVE-2026–28289), Patch Bypass Analysis
════════════════════════
𐀪 Author: Pandit Shivam
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 09:42:18 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #cybersecurity #cve_2026 #mail2shell #cve
Medium
“Mail2Shell”, Zero-Click Unauthenticated RCE in FreeScout (CVE-2026–28289), Patch Bypass Analysis
Introduction
45 views
Daily Writeups
⤷ Title: I Analyzed 10,000 SQL Injection Attacks — Here’s What They Actually Look Like
════════════════════════
𐀪 Author: John Hawkins
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 08:57:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #waf #sql_injection
62 views
Daily Writeups
⤷ Title: How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 16:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:37:36 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #Malware #Scams and Fraud #AllSecurity #BeaverTail #CChris Papathanasiou #Cyber Attack #Cybersecurity #Lazarus #LinkedIn #North Korea
Hackread
Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
Follow us on all major social media platforms @Hackread
29 views
Daily Writeups
⤷ Title: HTTP Responses: Status Codes and Security Vulnerabilities
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:28:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #cybersecurity #https #web_security
Medium
HTTP Responses: Status Codes and Security Vulnerabilities
In a penetration test (pentest), the most valuable intel usually isn’t sitting on the UI; it’s hiding in the raw HTTP responses. 200, 403…
26 views
Daily Writeups
⤷ Title: How to Install and Use Arachni for Web Vulnerability Scanning on Linux
════════════════════════
𐀪 Author: Ahmat Prayoga Sembiring
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:14:07 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #web_security #arachni #cybersecurity
Medium
How to Install and Use Arachni for Web Vulnerability Scanning on Linux
Ringkasan Eksekutif: Arachni adalah open source framework pemindaian keamanan aplikasi web berbasiskan Ruby yang dirancang untuk membantu…
31 views
Daily Writeups
⤷ Title: DLLHijacking Explained to a 10yr 0ld
════════════════════════
𐀪 Author: ghostvirus
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:18:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #privilege_escalation #cybersecurity #dll_hijacking #bug_bounty_writeup
Medium
DLLHijacking Explained to a 10yr 0ld
To really understand DLL hijacking, you need to understand how Windows actually loads a DLL internally. The key component is the Windows…
25 views
Daily Writeups
⤷ Title: Using AI to Review Bug Bounty Recon Results
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:54:08 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ai #cybersecurity #open_source
Medium
🤖🦞 Using AI to Review Bug Bounty Recon Results
🤖🦞 Using AI to Review Bug Bounty Recon Results
17 views
Daily Writeups
⤷ Title: Lab: Exploiting an API endpoint using documentation
════════════════════════
𐀪 Author: jaejun835
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:21:11 GMT
════════════════════════
⌗ Tags: #api #portswigger #hacking
Medium
Lab: Exploiting an API endpoint using documentation
[Problem]
18 views
Daily Writeups
⤷ Title: How Can Businesses Improve Security with Penetration Testing
════════════════════════
𐀪 Author: Spectrum Stream
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:35:47 GMT
════════════════════════
⌗ Tags: #penetration_testing
Medium
How Can Businesses Improve Security with Penetration Testing
Cyber threats continue to affect organisations of every size. Many businesses rely on firewalls and antivirus tools but still remain unsure…
18 views
Daily Writeups
⤷ Title: HOW THE WEB WORKS -TryHackMe Module. Room 4: Putting it all together.
════════════════════════
𐀪 Author: Raymond Ebonine
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:15:51 GMT
════════════════════════
⌗ Tags: #web #cybersecurity #tryhackme_walkthrough #tryhackme #website
Medium
HOW THE WEB WORKS -TryHackMe Module. Room 4: Putting it all together.
Understand how the World Wide Web (www) truly works.
22 views
Daily Writeups
⤷ Title: Lampião: 1 VulnHub Walkthrough (Easy Explanation)
════════════════════════
𐀪 Author: Swatiparati
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:44:01 GMT
════════════════════════
⌗ Tags: #vulnhub #lampiao #walkthrough
Medium
Lampião: 1 VulnHub Walkthrough (Easy Explanation)
Introduction
28 views
Daily Writeups
⤷ Title: Lampião: 1 VulnHub Walkthrough (Easy Explanation)
════════════════════════
𐀪 Author: Pallavilalasingi
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 11:41:35 GMT
════════════════════════
⌗ Tags: #vulnhub #walkthrough #lampiao
Medium
Lampião: 1 VulnHub Walkthrough (Easy Explanation)
Introduction
32 views
Daily Writeups
⤷ Title: APT28 MSHTML Zero-Day Exploitation Campaign
════════════════════════
𐀪 Author: Threatsys Technologies Pvt Ltd
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:53:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #grc_software #vulnerability #ethical_hacking #self_awareness
Medium
APT28 MSHTML Zero-Day Exploitation Campaign
Threat Intelligence Report on CVE-2026–21513 Exploitation Activity
41 views
Daily Writeups
⤷ Title: SQL Injection
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:28:12 GMT
════════════════════════
⌗ Tags: #sql #sql_injection #vulnerability #database #cybersecurity
Medium
SQL Injection
In the web security realm, we’re going to talk about a vulnerability that has stubbornly clung to the “OWASP Top 10” list for years. It…
50 views
Daily Writeups
⤷ Title: New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:50:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: Study Finds ROME AI Agent Attempted Cryptomining Without Instructions
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 14:10:08 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Machine Learning #Security #Agentic AI #AI #Ai Chatbot #arXiv #Cryptomining #Cybersecurity #Machine Le #ROME AI
Hackread
Study Finds ROME AI Agent Attempted Cryptomining Without Instructions
A study found the ROME AI agent attempted cryptocurrency mining without instructions during training, raising questions about monitoring AI systems.
38 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #28: Boolean-Based Blind SQL Injection — Extracting Data One True/False at a…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 14:01:26 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #penetration_testing #bug_bounty #technology
Medium
“Bug Bounty Bootcamp #28: Boolean-Based Blind SQL Injection — Extracting Data One True/False at a Time”
When the application only answers “yes” or “no,” you’d think data extraction is impossible. Think again. Learn to play 20 Questions with…
27 views
Daily Writeups
⤷ Title: The SSL Pinning Matrix: When to Patch, When to Hook, and Why it Matters
════════════════════════
𐀪 Author: Thomas Youssef
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 14:01:07 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #infosec #cybersecurity #bug_bounty #penetration_testing
Medium
The SSL Pinning Matrix: When to Patch, When to Hook, and Why it Matters
Hello everyone, I’m Thomas Youssef, and I’m back with another article from my mobile penetration testing and Bug Bounty journey.
20 views