Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: TryHackMe: Active Directory Basic Enumeration
════════════════════════
𐀪 Author: Ipingsleeping
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 23:27:57 GMT
════════════════════════
⌗ Tags: #active_directory #tryhackme
Medium
TryHackMe: Active Directory Basic Enumeration
I want to share my walkthrough for the Active Directory Basic Enumeration room on TryHackMe. This lab is excellent for understanding how…
38 views
Daily Writeups
⤷ Title: High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:55:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20163 #cybersecurity #infosec #Patch Alert #RCE vulnerability #Remote Command Execution #REST API #Splunk #Splunk Enterprise #threat intelligence
Daily CyberSecurity
High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
Splunk warns of a high-severity RCE flaw (CVE-2026-20163) in its REST API. Attackers with edit_cmd rights can execute arbitrary commands. Patch immediately.
28 views
Daily Writeups
⤷ Title: Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:41:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #CVE_2026_1281 #cyber_espionage #cybersecurity #ddos #Hacktivism #infosec #MuddyWater #Rapid7 Labs #threat intelligence #zero_day vulnerabilities
Daily CyberSecurity
Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
Rapid7 reveals a surge in state-directed cyber espionage and noisy hacktivism. Learn how actors like MuddyWater exploit critical CVEs to breach networks.
24 views
Daily Writeups
⤷ Title: Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:13:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco IOS XR #Command Line Interface #CVE_2026_20040 #CVE_2026_20046 #cybersecurity #infosec #network_security #Patch Alert #privilege escalation #router security
Daily CyberSecurity
Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
Cisco patches critical privilege escalation flaws (CVE-2026-20040, CVE-2026-20046) in IOS XR software that allow local attackers to gain full root access.
16 views
Daily Writeups
⤷ Title: Iran-Aligned TA453 Weaponizes ‘Operation Epic Fury’ for Cyber Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:05:28 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT42 #Charming Kitten #Credential Phishing #cyber_espionage #Middle East Cyber Threats #Operation Epic Fury #Proofpoint #social engineering #TA453 #threat intelligence
Daily CyberSecurity
Iran-Aligned TA453 Weaponizes 'Operation Epic Fury' for Cyber Espionage
Proofpoint reveals Iran-aligned TA453 is exploiting Operation Epic Fury to launch targeted credential phishing campaigns against U.S. think tanks.
19 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:54:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #C2 Infrastructure #Cofense #Command and Control #cybersecurity #data exfiltration #infosec #malware #phishing #Telegram Bot API #threat intelligence
Daily CyberSecurity
The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
A new Cofense report reveals how hackers abuse legitimate Telegram Bot APIs to create stealthy Command and Control (C2) centers for data exfiltration.
16 views
Daily Writeups
⤷ Title: Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:45:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #bug bounty #Chrome 146 #CVE_2026_3913 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #infosec #Patch Alert #WebML Vulnerability
Daily CyberSecurity
Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
Google releases Chrome 146, fixing 29 vulnerabilities including a critical heap buffer overflow in WebML (CVE-2026-3913). Update your browser immediately.
13 views
Daily Writeups
⤷ Title: Code Red: GitLab’s Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:37:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1069 #CVE_2026_1090 #cybersecurity #Denial of Service #DevSecOps #GitLab security #infosec #Patch Alert #vulnerability management #XSS Vulnerability
Daily CyberSecurity
Code Red: GitLab's Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
GitLab issues urgent security updates (18.9.2, 18.8.6, 18.7.6) fixing critical XSS (CVE-2026-1090) and DoS flaws. Patch self-managed instances today.
11 views
Daily Writeups
⤷ Title: Things I Always Check When Testing a Login Page
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #hacking #testing #penetration_testing #bug_bounty #cybersecurity
Medium
Things I Always Check When Testing a Login Page 🔐
Every login page is a potential goldmine. Here’s my exact checklist.
❤2
11 views
Daily Writeups
⤷ Title: How Hackers Actually Think: The Mindset Most Security Professionals Miss.
════════════════════════
𐀪 Author: Akwaeze Odera Gerald
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:37:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_security #ethical_hacking #cybersecurity #bug_bounty
Medium
How Hackers Actually Think: The Mindset Most Security Professionals Miss.
Most security professionals search for vulnerabilities, attackers search for opportunities.
19 views
Daily Writeups
⤷ Title: Drone Technology and Wireless Security: The Overlooked Attack Surface
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:48:16 GMT
════════════════════════
⌗ Tags: #wireless #cybersecurity #hacking #radio
Medium
Drone Technology and Wireless Security: The Overlooked Attack Surface
Understanding How Radio Protocols, Telemetry Links, and Remote Control Systems Create New Opportunities for Security Testing
15 views
Daily Writeups
⤷ Title: Improper Access Control Leading to Administrative Privilege Escalation
════════════════════════
𐀪 Author: Kiteegti
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:45:30 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #cybersecurity
Medium
Improper Access Control Leading to Administrative Privilege Escalation
Pembukaan
16 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough: Linux Fundamentals Part 2
════════════════════════
𐀪 Author: Shubham Khirwadkar
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:31:23 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #linux_fundamentals #cybersecurity #linux
Medium
TryHackMe Walkthrough: Linux Fundamentals Part 2
A hands-on walkthrough of the Linux Fundamentals Part 2 room on TryHackMe.
18 views
Daily Writeups
⤷ Title: Empire Breakout VM — Walkthrough Structure | Step-by-Step Penetration Testing Guide
════════════════════════
𐀪 Author: Klsvppcspranjali
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:41:31 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #penetration_testing #ethical_hacking #kali_linux
Medium
Empire Breakout VM — Walkthrough Structure | Step-by-Step Penetration Testing Guide
A detailed Cyber Security walkthrough demonstarting enumeration, exploitation, and privilege escalation to gain root access in the VM
18 views
Daily Writeups
⤷ Title: VulNyx — School Writeup
════════════════════════
𐀪 Author: _ATROX_
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:03:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #red_team #cybersecurity
Medium
VulNyx — School Writeup
Difficulty: Hard · OS: Windows 10 · Tags: LFI, Tomcat, WAR Upload, SeImpersonatePrivilege, PrintSpoofer
❤1
21 views
Daily Writeups
⤷ Title: Abusing AD-DACL: AllExtendedRights
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:05:35 GMT
════════════════════════
⌗ Tags: #active_directory #penetration_testing #active_directory_attack
Medium
Abusing AD-DACL: AllExtendedRights
Extended rights refer to special privileges that administrators assign to objects, allowing them to read privileged attributes and perform…
25 views
Daily Writeups
⤷ Title: The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 04:26:38 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #C2 Backdoor #CI/CD security #CVE_2026_31976 #cybersecurity #DevSecOps #GitHub Actions #infosec #supply chain attack #Tag Poisoning #Xygeni
Daily CyberSecurity
The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines
A critical 9.4 CVSS tag poisoning attack (CVE-2026-31976) hit the xygeni-action GitHub Action, injecting a C2 backdoor into CI/CD pipelines. Update now.
26 views
Daily Writeups
⤷ Title: The Fake Job Trap: Microsoft Exposes the ‘Contagious Interview’ Campaign Targeting Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 03:19:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #developer security #DevSecOps #infosec #Invisible Ferret #Microsoft Defender Experts #OtterCookie #phishing #social engineering
Daily CyberSecurity
The Fake Job Trap: Microsoft Exposes the 'Contagious Interview' Campaign Targeting Developers
Microsoft exposes the "Contagious Interview" campaign. Fake recruiters trick developers into installing Invisible Ferret malware during coding tests.
12 views
Daily Writeups
⤷ Title: CISA Mandates Urgent Patch for Maximum 10.0 CVSS n8n RCE Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 03:06:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2025_68613 #cybersecurity #infosec #n8n #Patch Alert #rce #Remote Code Execution #vulnerability management #Workflow Automation
Daily CyberSecurity
CISA Mandates Urgent Patch for Maximum 10.0 CVSS n8n RCE Flaw
CISA warns of a critical 10.0 CVSS RCE flaw (CVE-2025-68613) in n8n workflow automation. Update to version 1.122.0 immediately to prevent server takeover.
20 views
Daily Writeups
⤷ Title: Is Coding the Key to Cybersecurity?
════════════════════════
𐀪 Author: Ishant Gupta
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #bug_bounty #ethical_hacking #web_security
Medium
Is Coding the Key to Cybersecurity?
People are afraid of coding languages a lot, They think IT industry is full of Programming, But Wait!
9 views
Daily Writeups
⤷ Title: VulnHub: DC-9 CTF Walkthrough: How to get root from Privilege Escalation through Port Knocking…
════════════════════════
𐀪 Author: Afnan Bin Abbas
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 04:55:16 GMT
════════════════════════
⌗ Tags: #port_knocking #cybersecurity #hacking #ctf_writeup #vulnhub
Medium
VulnHub: DC-9 CTF Walkthrough: How to get root from Privilege Escalation through Port Knocking (2026 Edition)
Who am I? 🙇 (optional to read..! 😊)
9 views