Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: XXE Injection Guide: Fundamentals, Payloads, and Bug Bounty Strategies
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #penetration_testing #hacking
Medium
XXE Injection Guide: Fundamentals, Payloads, and Bug Bounty Strategies
Learn what XXE is, how to detect it, and the best payloads for file reading, SSRF, and OOB attacks in security audits.
19 views
Daily Writeups
⤷ Title: Information Gathering in Web Pentesting — Solving INE “Information Gathering CTF 1”
════════════════════════
𐀪 Author: Amitishacked
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 22:51:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #information_security #hacking #security
Medium
Information Gathering in Web Pentesting — Solving INE “Information Gathering CTF 1”
Before you attack, you observe. Before you exploit, you enumerate. This is how information gathering wins CTFs — and real engagements.”
25 views
Daily Writeups
⤷ Title: Full Agenda Now Available for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 23:14:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #cyber_security_awareness #information_security #infosec
Medium
Full Agenda Now Available for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!
The CVE Program and FIRST will co-host VulnCon 2026 at the DoubleTree Resort by Hilton Hotel Paradise Valley — Scottsdale, in Scottsdale…
23 views
Daily Writeups
⤷ Title: The Danger of Over-Permissive File Shares
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:57:03 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #hacking #penetration_testing #bug_bounty_writeup
Medium
📁The Danger of Over-Permissive File Shares
Another box, another hack. This time we’re making our way through Hack The Box machine Escape. Let’s see where this one takes us.
34 views
Daily Writeups
⤷ Title: HackTheBox CCTV Walkthrough – SQL Injection to Root via motionEye Command Injection
════════════════════════
𐀪 Author: Ndkmakka
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 23:39:03 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #penetration_testing #hackthebox #cybersecurity
Medium
HackTheBox CCTV Walkthrough – SQL Injection to Root via motionEye Command Injection
HackTheBox CCTV (SecureVision) – Complete Walkthrough
43 views
Daily Writeups
⤷ Title: You Don’t Need a Threat Hunting Lab — If You’re a SOC Analyst, Your Environment Is Already One
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 01:30:51 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #threat_hunting #soc
Medium
You Don’t Need a Threat Hunting Lab — If You’re a SOC Analyst, Your Environment Is Already One
A lot of SOC analysts want to learn threat hunting.
28 views
Daily Writeups
⤷ Title: When gets() Gets You in Trouble
════════════════════════
𐀪 Author: Systemic
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:56:13 GMT
════════════════════════
⌗ Tags: #application_security #hacking #cybersecurity #technology #programming
Medium
When gets() Gets You in Trouble
In my previous article, I showed you how easy it is to hijack a human brain. This time, I’ll show you that your computers are just as…
23 views
Daily Writeups
⤷ Title: Building a SOC Detection Engineering Lab with Elastic, Mythic C2, and Attack Simulations
════════════════════════
𐀪 Author: Gregory Dawson
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:51:13 GMT
════════════════════════
⌗ Tags: #security_engineering #hacking #elasticsearch #information_security #blue_team
Medium
Building a SOC Detection Engineering Lab with Elastic, Mythic C2, and Attack Simulations
Modern security operations centers rely heavily on detection engineering — building systems that detect attacker behavior and generate…
19 views
Daily Writeups
⤷ Title: 2025 Military and Defense Industry Cyber Threat Landscape
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:13:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberattack #infosec #threat_intelligence #hacking
Medium
2025 Military and Defense Industry Cyber Threat Landscape
This report analyzes cyber threat activities targeting the military and defense industry from January to December 2025.
24 views
Daily Writeups
⤷ Title: Is Your Home ONU Safe?
════════════════════════
𐀪 Author: Superasystem Inc.
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 01:56:44 GMT
════════════════════════
⌗ Tags: #infosec #linux #cybersecurity #iot_security #home_network
Medium
Is Your Home ONU Safe?
A 2024 Router Running Decade-Old Software
29 views
Daily Writeups
⤷ Title: Abusing AD-DACL: AddSelf
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 01:16:49 GMT
════════════════════════
⌗ Tags: #active_directory #red_teaming #active_directory_attack #active_directory_security #penetration_testing
Medium
Abusing AD-DACL: AddSelf
The AddSelf permission in Active Directory allows users to add themselves to the target security group. Because of security group…
26 views
Daily Writeups
⤷ Title: Break it — TryHackMe Writeup
════════════════════════
𐀪 Author: Riad Moudjahed
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:58:05 GMT
════════════════════════
⌗ Tags: #cryptography #decryption #cybersecurity #tryhackme
Medium
Break it — TryHackMe Writeup
Task 1: Bases
30 views
Daily Writeups
⤷ Title: Exploiting an SSRF Vulnerability to Retrieve the Server Hostname-Hackviser Lab
════════════════════════
𐀪 Author: Manohar T H
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 01:27:02 GMT
════════════════════════
⌗ Tags: #ssrf_vulnerability #ssrf #labs #ssrf_walkthrough #hackviser
Medium
Exploiting an SSRF Vulnerability to Retrieve the Server Hostname-Hackviser Lab
Server-Side Request Forgery (SSRF) is a common and dangerous web vulnerability that allows an attacker to make the server perform…
36 views
Daily Writeups
⤷ Title: The ‘Must-Patch’ Release: WordPress 6.9.2 Scrambles to Fix 10 Critical Flaws from XSS to SSRF
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 03:58:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CMS Security #cybersecurity #infosec #Patch Alert #Path Traversal #ssrf #vulnerability management #WordPress 6.9.2 #wordpress security #XSS Vulnerability
Daily CyberSecurity
The 'Must-Patch' Release: WordPress 6.9.2 Scrambles to Fix 10 Critical Flaws from XSS to SSRF
Urgent: WordPress 6.9.2 patches 10 critical security flaws, including XSS, SSRF, and path traversal. Update your site immediately to prevent exploitation.
25 views
Daily Writeups
⤷ Title: High-Severity SQL Injection in Ally WordPress Plugin Threatens 400K Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 03:03:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Ally Plugin #CVE_2026_2413 #database security #infosec #Patch Alert #sql injection #Time_Based SQLi #Vulnerability #Wordfence #wordpress security
Daily CyberSecurity
High-Severity SQL Injection in Ally WordPress Plugin Threatens 400K Sites
A critical SQL injection flaw (CVE-2026-2413) in the Ally WordPress plugin exposes 400K+ sites to database theft. Update to version 4.1.0 immediately.
16 views
Daily Writeups
⤷ Title: The Default Danger: Maximum 10.0 CVSS Vulnerability Leaves Honeywell IQ4x Controllers Wide Open
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:48:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BMS Security #building management system #CVE_2026_3611 #CVSS 10.0 #cybersecurity #Honeywell IQ4x #ICS security #infosec #unauthenticated access #Vulnerability
Daily CyberSecurity
The Default Danger: Maximum 10.0 CVSS Vulnerability Leaves Honeywell IQ4x Controllers Wide Open
A critical 10.0 CVSS flaw (CVE-2026-3611) in Honeywell IQ4x BMS controllers leaves web HMIs exposed without authentication. Secure your systems immediately.
16 views
Daily Writeups
⤷ Title: Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:05:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2025_40943 #ICS security #Industrial Automation Security #Manufacturing Security #Patch Alert #SCADA Security #Siemens SIMATIC #Vulnerability #XSS
Daily CyberSecurity
Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500
A critical 9.6 CVSS XSS vulnerability (CVE-2025-40943) in Siemens SIMATIC S7-1500 CPUs allows attackers to inject malicious code via trace files.
10 views
Daily Writeups
⤷ Title: Microsoft Patch Tuesday March 2026: 93 Vulnerabilities Addressed, Including Two Zero-Days
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 01:48:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET Vulnerability #CVE_2026_21262 #CVE_2026_26127 #cybersecurity #infosec #Microsoft Patch Tuesday #Patch Alert #sql server #vulnerability management #zero_day
Daily CyberSecurity
Microsoft Patch Tuesday March 2026: 93 Vulnerabilities Addressed, Including Two Zero-Days
Microsoft's March 2026 Patch Tuesday addresses 93 vulnerabilities, including two public zero-days affecting SQL Server and .NET. Patch your systems now.
17 views
Daily Writeups
⤷ Title: PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
════════════════════════
𐀪 Author: SJ_Source_Sink
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:40:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #prompt_injection_attack #bug_bounty #genai #bug_bounty_tips
Medium
PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
When three individually medium-severity issues chain together to compromise an AI assistant platform.
16 views
Daily Writeups
⤷ Title: ️Turning Directory Data into Domain Access
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:40:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking #ctf #bug_bounty
Medium
💻🕷️Turning Directory Data into Domain Access
Continuing my mastery of the AD journey.
15 views
Daily Writeups
⤷ Title: XSS Bypass to Zero Click Account Takeover in AI Chatbot
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:37:08 GMT
════════════════════════
⌗ Tags: #report #bug_bounty #llm #cybersecurity #xss_attack
Medium
XSS Bypass to Zero Click Account Takeover in AI Chatbot
Hi everyone, in this article, I’ll walk through a recent penetration test I conducted against a custom-built AI chatbot. As usual, we’ll…
16 views