Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Web Security Series #7 — Exploiting Blind SQL Injection via Session Cookies
════════════════════════
𐀪 Author: Laibakashif
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 10:03:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_hunting #penetration_testing #ethical_hacking #web_application_security
Medium
Web Security Series #7 — Exploiting Blind SQL Injection via Session Cookies
SQL Injection is one of the most critical vulnerabilities in web applications. However, not all SQL Injection flaws are directly visible…
11 views
Daily Writeups
⤷ Title: Identifying Critical Security Flaws: A Case Study on a Buggy Web Application
════════════════════════
𐀪 Author: Tooba Siddiqui
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 09:20:17 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_application_vapt #vulnerability_assessment #web_penetration_testing
Medium
Identifying Critical Security Flaws: A Case Study on a Buggy Web Application
VULNERABILITY ASSESSMENT REPORT STATUS: FINAL REPORT | CLASSIFICATION: CONFIDENTIAL
12 views
Daily Writeups
⤷ Title: Missing Person CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 08:57:16 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #ctf_writeup #tryhackme_writeup #ctf_walkthrough
Medium
Missing Person CTF Notes | TryHackMe
Simple OSINT steps to solve Missing Person TryHackMe challenge
12 views
Daily Writeups
⤷ Title: VulnHub DC2
════════════════════════
𐀪 Author: IO
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 09:44:30 GMT
════════════════════════
⌗ Tags: #vulnhub #pentesting
Medium
VulnHub DC2
Link: https://www.vulnhub.com/entry/nully-cybersecurity-1,549/
19 views
Daily Writeups
⤷ Title: picoCTF Challenge Writeup: Riddle Registry (Step-by-Step Guide)
════════════════════════
𐀪 Author: Ali Hasil
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 10:40:32 GMT
════════════════════════
⌗ Tags: #digital_forensics #ctf #cybersecurity #ethical_hacking #picoctf
Medium
picoCTF Challenge Writeup: Riddle Registry (Step-by-Step Guide)
by Prince Niyonshuti N | Easy | Forensics |browser_webshell_solvable
15 views
Daily Writeups
⤷ Title: A Design to Prevent IdP Token Exposure — Introducing the Identity Token Broker (ITB)
════════════════════════
𐀪 Author: Tsubasa A
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 09:27:13 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #cloud_security #identity_management #architecture
Medium
A Design to Prevent IdP Token Exposure — Introducing the Identity Token Broker (ITB)
A Design That Prevents IdP Tokens From Leaving the System — Proposal for an Identity Token Broker (ITB) An IdP token has an inherently dangerous property: once leaked, it allows arbitrary API …
22 views
Daily Writeups
⤷ Title: I built xscore — scores any X account based on the official open source algorithm…
════════════════════════
𐀪 Author: Apoorv Darshan
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 09:25:23 GMT
════════════════════════
⌗ Tags: #twitter_data #twitter #xai #twitter_marketing #xs
Medium
I built xscore — scores any X account based on the official open source algorithm…
19 signals. per tweet breakdown. runs locally on your machine.
41 views
Daily Writeups
⤷ Title: Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 18:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Claude Code Security and Magecart: Getting the Threat Model Right
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 17:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: 9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 17:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: New .NET AOT Malware Hides Code as a Black Box to Evade Detection
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:23:34 +0000
════════════════════════
⌗ Tags: #Security #Malware #.NET #AOT #Black Box #Cybersecurity #Rhadamanthys
Hackread
New .NET AOT Malware Hides Code as a Black Box to Evade Detection
Researchers at Howler Cell have discovered a new .NET AOT malware campaign that uses a clever scoring system to bypass security tools and steal your data.
18 views
Daily Writeups
⤷ Title: The AI Privacy Shield: How AnonyMask Automates Data Redaction for LLM and RAG Workflows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:08:56 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AnonyMask #Anonymization #Data Masking #data privacy #Enterprise AI #GDPR Compliance #LLM Security #RAG #Sensitive Data Protection #UU PDP
Information Security News
The AI Privacy Shield: How AnonyMask Automates Data Redaction for LLM and RAG Workflows
AnonyMask: Automated Masking and Unmasking of Explicit and Implicit Privacy Data AnonyMask is a privacy-preserving tool designed to automatically detect, mask, and unmask privacy data across vario…
14 views
Daily Writeups
⤷ Title: Root Without a Password: The 9.8 CVSS “Ghost in the Shell” Exploit Haunting GNU Telnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:03:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Buffer Overflow #CVE_2026_32746 #Dream Security #GNU InetUtils #Linux Security #Network Protocol #RCE #remote code execution #Root Access #Telnetd #zero_day 2026
Penetration Testing Tools
Root Without a Password: The 9.8 CVSS "Ghost in the Shell" Exploit Haunting GNU Telnet
CVE-2026-32746: A critical 9.8 CVSS flaw in GNU Telnet allows unauthenticated root access via port 23. Learn why this "Ghost" exploit is an existential threat.
13 views
Daily Writeups
⤷ Title: The ClickFix Trap: How “MacSync” Infostealers Hijack the Developer Terminal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:59:36 +0000
════════════════════════
⌗ Tags: #Malware #ChatGPT Atlas #ClickFix #Cyber Security 2026 #GoogleFix #InstallFix #KongTuke #macOS Infostealer #MacSync #ModeloRAT #Sophos #Terminal Malware
Penetration Testing Tools
The ClickFix Trap: How "MacSync" Infostealers Hijack the Developer Terminal
The forensic savants at Sophos have chronicled a burgeoning wave of cyber offensives wherein digital marauders proliferate the
14 views
Daily Writeups
⤷ Title: The Missile Strike Snare: How Mustang Panda Exploited Geopolitical Chaos to Strike the Gulf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:58:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bahrain #Chinese APT #Cyber Espionage 2026 #DLL side_loading #Gulf Nations #Middle East Conflict #Mustang Panda #phishing #PlugX #Qatar #UAE #Zscaler ThreatLabz
Penetration Testing Tools
The Missile Strike Snare: How Mustang Panda Exploited Geopolitical Chaos to Strike the Gulf
Forensic savants at Zscaler have chronicled a nascent wave of cyber offensives tethered to a Chinese syndicate, resolutely
13 views
Daily Writeups
⤷ Title: Poisoned Play: FBI Seeks Victims of Massive Malware Campaign Hiding in Steam Indie Games
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:54:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlockBlasters #Chemia #Cybercrime 2026 #DashFPS #Dashverse #FBI #Infostealer #Lampy #Lunara #malware #PirateFi #Seattle FBI #Steam #Tokenova #Victim Services
Penetration Testing Tools
Poisoned Play: FBI Seeks Victims of Massive Malware Campaign Hiding in Steam Indie Games
The Federal Bureau of Investigation is profoundly broadening its inquiry into the proliferation of malicious software across the
15 views
Daily Writeups
⤷ Title: Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:07:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ConnectWise #Cryptographic Keys #CVE_2026_3564 #cybersecurity #infosec #Patch Alert #Remote Access #ScreenConnect #Server Security #Vulnerability
Daily CyberSecurity
Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
A critical 9.0 CVSS vulnerability (CVE-2026-3564) in ConnectWise ScreenConnect exposes server cryptographic keys. On-premise users must update to 26.1 now.
18 views
Daily Writeups
⤷ Title: # İnsan Beyni Hacklənə bilərmi? Neural Chip, AI və Gələcəyin Kibertəhlükəsizliyi
════════════════════════
𐀪 Author: cybershieldy.com
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:32:16 GMT
════════════════════════
⌗ Tags: #hacking #hacker #cybersecurity #siber #kiber_tehluke
Medium
# 🧠 İnsan Beyni Hacklənə bilərmi? Neural Chip, AI və Gələcəyin Kibertəhlükəsizliyi
Texnologiya sürətlə dəyişir. Amma artıq əsas sual dəyişib:
25 views
Daily Writeups
⤷ Title: One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
════════════════════════
𐀪 Author: Harveen Kaur
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:18:30 GMT
════════════════════════
⌗ Tags: #hacking #digital_security #technology #cybersecurity #passwords
Medium
One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
21 views
Daily Writeups
⤷ Title: How to Answer the Security Question in Your Series A Pitch
════════════════════════
𐀪 Author: Cyphersilhouette
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #hacking #compliance #cybersecurity #software_development
Medium
How to Answer the Security Question in Your Series A Pitch
Investors who have seen portfolio company breaches now ask specific follow-ups. Here’s what a credible answer actually sounds like
16 views