Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: How I Found Information Disclosure on a Non-Standard Port: The Story of Apache mod_status
════════════════════════
𐀪 Author: Albertstive
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:18:51 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #information_disclosure #cyber_security_awareness #bug_bounty
Medium
How I Found Information Disclosure on a Non-Standard Port: The Story of Apache mod_status
Introduction
18 views
Daily Writeups
⤷ Title: [Kubernetes for Everyone] — Exploiting Grafana (CVE-2021-43798) To Gain SSH Access and Extract…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:01:15 GMT
════════════════════════
⌗ Tags: #kubernetes #directory_traversal #grafana #cve_2021_43798 #bug_bounty
Medium
[Kubernetes for Everyone] — Exploiting Grafana (CVE-2021-43798) To Gain SSH Access and Extract Secrets From a Kubernetes Cluster
Grafana CVE-2021-43798 to Kubernetes Secrets — Full Exploitation Chain with Pod Enumeration.
19 views
Daily Writeups
⤷ Title: [pt.1] What Happens If I Click This?
════════════════════════
𐀪 Author: Jinnatul
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:49:48 GMT
════════════════════════
⌗ Tags: #hacking #ai_safety #red_team #agentic_ai #antiabuse
Medium
[pt.1] What Happens If I Click This?
In the Anti-Abuse space, we’ve spent years building walls against a predictable enemy (bad actors). We treat Account Takeovers (ATO) as a…
20 views
Daily Writeups
⤷ Title: Web Application Security: Hands-On Practice (Chapter 16 from The Web Application Hacker’s Handbook)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:29:03 GMT
════════════════════════
⌗ Tags: #hacking #chapter16 #web_application_security #cybersecurity
Medium
Web Application Security: Hands-On Practice (Chapter 16 from The Web Application Hacker’s Handbook)
Note: This write-up reflects my learning and hands-on practice based on the book The Web Application Hacker’s Handbook: Discovering and…
20 views
Daily Writeups
⤷ Title: The PDCA Cycle: The Upward Spiral of Security
════════════════════════
𐀪 Author: Sujon Al Mamun
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 06:15:23 GMT
════════════════════════
⌗ Tags: #infosec #grc #improvement #cybersecurity #pdca
Medium
The PDCA Cycle: The Upward Spiral of Security 🔄
GRC is a Marathon, Not a Sprint! 🏃‍♂️, and today we’re talking about the real “engine” that powers everything, the PDCA Cycle. Lots of…
16 views
Daily Writeups
⤷ Title: Network basics for cybersecurity — Day 6
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 06:10:32 GMT
════════════════════════
⌗ Tags: #technology #web_development #cybersecurity #infosec #information_security
Medium
Network basics for cybersecurity — Day 6
What is TCP/IP Model in simple words ?
13 views
Daily Writeups
⤷ Title: Identity Sprawl: The Hidden Risk in Modern Cloud Environments
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:28:46 GMT
════════════════════════
⌗ Tags: #identity_management #infosec #access_control #cybersecurity #cloud_security
Medium
Identity Sprawl: The Hidden Risk in Modern Cloud Environments
Context
15 views
Daily Writeups
⤷ Title: Enhancing BloodHound with AI: Active Directory Attack Path Analysis via MCP and Claude AI
════════════════════════
𐀪 Author: Rio Darmawan
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:01:05 GMT
════════════════════════
⌗ Tags: #ai_agent #penetration_testing #active_directory #red_team #claude
Medium
Enhancing BloodHound with AI: Active Directory Attack Path Analysis via MCP and Claude AI
Active Directory environments often contain complex relationships between users, groups, computers, and privileges. Identifying potential…
20 views
Daily Writeups
⤷ Title: FunBox: Rookie — CTF Walkthrough | Beginner Friendly.
════════════════════════
𐀪 Author: Gouriiih
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 06:42:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #ctf_walkthrough
Medium
FunBox: Rookie — CTF Walkthrough | Beginner Friendly.
1. Introduction
12 views
Daily Writeups
⤷ Title: Tryhackme |Disk Analysis & Autopsy
════════════════════════
𐀪 Author: Kiana Anaceliya
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:02:33 GMT
════════════════════════
⌗ Tags: #disk_image_forensics #digital_forensics #tryhackme #autopsy
Medium
Tryhackme |Disk Analysis & Autopsy
Introduction :
14 views
Daily Writeups
⤷ Title: TryHackMe Detecting AD Initial Access Write up
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:47:39 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #tryhackme_writeup
Medium
TryHackMe Detecting AD Initial Access Write up
🩷 Room link: https://tryhackme.com/room/detectingadinitialaccess
23 views
Daily Writeups
⤷ Title: How I Hacked and Secured a Docker Container Running DVWA — A Beginner’s Real Experience
════════════════════════
𐀪 Author: Mahimnasinh
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 06:24:38 GMT
════════════════════════
⌗ Tags: #docker #ethical_hacking #programming #cybersecurity #technology
Medium
How I Hacked and Secured a Docker Container Running DVWA — A Beginner’s Real Experience
From zero Docker knowledge to full exploitation and hardening — my honest journey through SQL injection, webshells, password cracking, and…
23 views
Daily Writeups
⤷ Title: सायबर सुरक्षा आणि एथिकल हॅकिंग: डिजिटल युगातील आपले अभेद्य कवच
════════════════════════
𐀪 Author: Smit Shah
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 06:20:37 GMT
════════════════════════
⌗ Tags: #intellignece #cybersecurity #ethical_hacking
Medium
सायबर सुरक्षा आणि एथिकल हॅकिंग: डिजिटल युगातील आपले अभेद्य कवच
आजच्या काळात आपण असं म्हणतो की ‘डेटा’ हेच नवीन सोनं किंवा तेल (New Oil) आहे. पण विचार करा, जर हेच मौल्यवान सोनं चोरीला गेलं तर…
33 views
Daily Writeups
⤷ Title: Deception Technology as the Ultimate High-Fidelity Signal
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:36:55 GMT
════════════════════════
⌗ Tags: #ai #ethical_hacking #cybersecurity #information_security #cyber_security_awareness
Medium
Deception Technology as the Ultimate High-Fidelity Signal
For decades, Security Operations Centers (SOCs) have operated under a reactive, volume-heavy paradigm. The traditional workflow relies on…
40 views
Daily Writeups
⤷ Title: Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 13:26:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: The $220,000 Patch: Darknet Vendor Peddles “SYSTEM” Access via Windows RDP Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_21533 #Cyber Security 2026 #Darknet #Infosec #Patch Tuesday #privilege escalation #RDP #Remote Desktop #TermService #windows #zero_day
Penetration Testing Tools
The $220,000 Patch: Darknet Vendor Peddles "SYSTEM" Access via Windows RDP Flaw
Within the shadowy recesses of a subterranean darknet forum, a highly anomalous lot has materialized: an unidentified vendor
32 views
Daily Writeups
⤷ Title: The End of the Restart: How Windows “Hotpatching” Will Seal Zero-Days Without a Single Reboot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:38:23 +0000
════════════════════════
⌗ Tags: #Windows #Cyber Security 2026 #Hotpatching #IT Administration #Microsoft Graph API #Microsoft Intune #Patch Tuesday #Windows 11 #Windows 11 Enterprise #Windows Autopatch #zero_day
Penetration Testing Tools
The End of the Restart: How Windows "Hotpatching" Will Seal Zero-Days Without a Single Reboot
The necessity of rebooting following the installation of security updates has long been a source of profound exasperation
❤1
15 views
Daily Writeups
⤷ Title: Shadow of the Router: How the “KadNap” Botnet Hijacked 14,000 ASUS Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:37:32 +0000
════════════════════════
⌗ Tags: #Malware #aic.sh #ASUS Routers #Black Lotus Labs #BOTNET #Cyber Espionage #Doppelganger proxy #IoT Security #Kademlia DHT #KadNap #Lumen Technologies #Malware 2026 #proxy network
Penetration Testing Tools
Shadow of the Router: How the "KadNap" Botnet Hijacked 14,000 ASUS Devices
The Black Lotus Labs vanguard at Lumen Technologies has unearthed a nascent botnet christened KadNap, operational since August
22 views
Daily Writeups
⤷ Title: The Invisible Switch: How “ClipXDaemon” Hijacks Linux Clipboards to Steal Crypto
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:35:12 +0000
════════════════════════
⌗ Tags: #Malware #Bitcoin #Clipboard hijacker #ClipXDaemon #Cryptocurrency Theft #Cyber Security 2026 #Ethereum #Fileless Malware #Linux Desktop security #Linux malware #Monero #X11 security
Penetration Testing Tools
The Invisible Switch: How "ClipXDaemon" Hijacks Linux Clipboards to Steal Crypto
Cybersecurity researchers have unearthed a nascent Linux malware strain christened ClipXDaemon. This insidious program clandestinely intercepts the contents
13 views
Daily Writeups
⤷ Title: The Living Dead: How “Zombie ZIP” Headers Trick 50 Mainstream Antivirus Engines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:30:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #Antivirus Bypass #Archive Security #Bombadil Systems #Chris Aziz #CVE_2026_0866 #Cyber Security 2026 #DEFLATE #EICAR #malware obfuscation #VirusTotal #ZIP Header Manipulation #Zombie ZIP
Penetration Testing Tools
The Living Dead: How "Zombie ZIP" Headers Trick 50 Mainstream Antivirus Engines
Investigators have directed their scrutiny toward a novel artifice for obfuscating malignant code within ZIP archives. Christened “Zombie
14 views
Daily Writeups
⤷ Title: The Silent Miner: How “BeatBanker” Malware Spoofs Starlink to Hijack Android Smartphones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:24:05 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #banking trojan #BeatBanker #Brazil #BTMOB RAT #cryptocurrency mining #Google Play Phishing #Infosec #mobile security #Starlink #Tech News 2026 #XMRig
Penetration Testing Tools
The Silent Miner: How "BeatBanker" Malware Spoofs Starlink to Hijack Android Smartphones
Analysts at Kaspersky Lab have unearthed an Android application christened BeatBanker, which cunningly masquerades as the Starlink satellite
13 views