Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 21:51:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 21:51:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:25:37 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Data Breaches #Aura Inspector #Cyber Attack #Cybersecurity #Extortion #Salesforce #ShinyHunters
Hackread
ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid.
33 views
Daily Writeups
⤷ Title: China-Linked Hackers Hit Qatar with Backdoor Disguised as War News
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:33:29 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #backdoor #Camaro Dragon #China #Cyber Attack #Cybersecurity #Cyberwar #Iran #Israel #Phishing #PlugX #Qatar
Hackread
China-Linked Hackers Hit Qatar with Backdoor Disguised as War News
China-linked hackers targeted Qatar using fake war news lures to spread PlugX backdoor malware and spy on military and energy sectors.
23 views
Daily Writeups
⤷ Title: Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 16:25:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_30903 #cybersecurity #infosec #Patch Alert #privilege escalation #VDI Client #Windows Security #Zoom Mail #Zoom Rooms #Zoom Vulnerability
Daily CyberSecurity
Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation
Zoom patches a critical 9.6 CVSS flaw (CVE-2026-30903) allowing unauthenticated remote privilege escalation on Windows. Update your clients immediately.
22 views
Daily Writeups
⤷ Title: Full Account Takeover via Email Confirmation Misconfiguration
════════════════════════
𐀪 Author: Abhay go
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:54:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #ethical_hacking #account_takeover
Medium
Full Account Takeover via Email Confirmation Misconfiguration
Introduction
22 views
Daily Writeups
⤷ Title: How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:22:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3_security #defi_security #ethical_hacking #blockchain
Medium
How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
A Step-by-Step Journey from Code Review to Bounty
30 views
Daily Writeups
⤷ Title: Let’s Explore robots.txt
════════════════════════
𐀪 Author: Anshkamra
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:11:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #robots #beginner
Medium
Let’s Explore robots.txt
When search engines like Google, Bing, or Yahoo scan the internet, they use automated programs called bots or crawlers.
17 views
Daily Writeups
⤷ Title: OSINT Is Not About Finding More Data — It Is About Asking Better Questions Than Everyone Else
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:56:14 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #business #earn_money_online #bug_bounty_tips #bug_bounty
Medium
OSINT Is Not About Finding More Data — It Is About Asking Better Questions Than Everyone Else
Introduction
24 views
Daily Writeups
⤷ Title: The Cross-Site Scripting Paradox: Why Developers Who Sanitize Input Still Get Exploited
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:55:57 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #business #earn_money_online #bug_bounty_writeup
Medium
The Cross-Site Scripting Paradox: Why Developers Who Sanitize Input Still Get Exploited
Introduction
14 views
Daily Writeups
⤷ Title: The Log4Shell Nightmare: How a Tiny Piece of Code Broke the Internet
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:24:30 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #cybersecurity #technology #programming
Medium
The Log4Shell Nightmare: How a Tiny Piece of Code Broke the Internet
TL;DR: A super-popular logging tool called Log4j had a critical flaw. Attackers could send a special line of text that tricked servers into…
14 views
Daily Writeups
⤷ Title: Weak Password Reset Token leading to Account Takeover
════════════════════════
𐀪 Author: Dipesh Paul
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:23:59 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #penetration_testing #account_takeover #ethical_hacking
Medium
Weak Password Reset Token leading to Account Takeover
A hands‑on walkthrough of a real‑world account takeover vulnerability — from discovery to exploitation, and finally a production‑grade fix.
22 views
Daily Writeups
⤷ Title: Analytics — HackTheBox Walkthrough
════════════════════════
𐀪 Author: Hemantha Krishna Challa
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:28:48 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #hacking #hackthebox_walkthrough #cybersecurity
Medium
Analytics — HackTheBox Walkthrough
Pwning Metabase with Pre-Auth RCE and GameOver(lay) LPE
15 views
Daily Writeups
⤷ Title: Microsoft OAuth Phishing Attack 2026: How Hackers Are Hijacking Government Accounts & How to Stop…
════════════════════════
𐀪 Author: Temma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:11:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #privacy #technology #hacking #government_technology
Medium
Microsoft OAuth Phishing Attack 2026: How Hackers Are Hijacking Government Accounts & How to Stop Them
They didn’t steal a password. They stole something far more dangerous — and most victims never saw it coming.
15 views
Daily Writeups
⤷ Title: I Ran an AI Agent Against My Own Network. Here’s What It Did That I Couldn’t Stop.
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:40:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #ethical_hacking #penetration_testing #artificial_intelligence
Medium
I Ran an AI Agent Against My Own Network. Here’s What It Did That I Couldn’t Stop.
AI agents in pen testing don’t take breaks, don’t get frustrated, and don’t miss the same door twice. Here’s what that looks like from both…
19 views
Daily Writeups
⤷ Title: TENGU RANSOMWARE
════════════════════════
𐀪 Author: Rakesh Krishnan
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:54:14 GMT
════════════════════════
⌗ Tags: #threat_intelligence #ransomware #osint #cybersecurity #infosec
Medium
TENGU RANSOMWARE
NOTE: This is the initial report of Tengu Ransomware. The detailed version will be updated in the same post when newer information gets…
17 views
Daily Writeups
⤷ Title: How I Accidentally Hacked a Government Payment Portal While Looking for Bugs
════════════════════════
𐀪 Author: LETCHU PKT
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:09:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty_tips #bug_bounty_writeup #cybersecurity #cyber_security_awareness
Medium
How I Accidentally Hacked a Government Payment Portal While Looking for Bugs
Or: What Happens When Demo Files Meet Production Servers (Spoiler: RCE)
37 views
Daily Writeups
⤷ Title: “How I built my own Port Scanner using Python”
════════════════════════
𐀪 Author: Akhilswami
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 17:52:17 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #python #ethical_hacking #technology
Medium
“How I built my own Port Scanner using Python”
From script kiddie to tool developer — My journey into Python Socket Programming.
45 views
Daily Writeups
⤷ Title: Zero-Click Account Takeover via Organization Invite Abuse
════════════════════════
𐀪 Author: Abhay go
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 19:51:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #web_security #account_takeover #cybersecurity
Medium
Zero-Click Account Takeover via Organization Invite Abuse
Introduction
38 views
Daily Writeups
⤷ Title: Android Content Provider Security: A Pentester’s Deep Dive — Part 1
════════════════════════
𐀪 Author: Mustafa Mohamed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 20:55:41 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #android_security #android_content_providers #application_security
Medium
Android Content Provider Security: A Pentester’s Deep Dive — Part 1
Hi folks! Today, we’re taking a deep dive into Android Content Providers from a security perspective. In this series, we’ll explore common…
33 views
Daily Writeups
⤷ Title: OWASP Juice Shop — BOLA: Unauthorized Basket Access
════════════════════════
𐀪 Author: Prem kr sharma
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:26:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #owasp #application_security
Medium
OWASP Juice Shop — BOLA: Unauthorized Basket Access | Security Assessment Finding
Vulnerability Overview
23 views