Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Root Without a Password: The 9.8 CVSS “Ghost in the Shell” Exploit Haunting GNU Telnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:03:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Buffer Overflow #CVE_2026_32746 #Dream Security #GNU InetUtils #Linux Security #Network Protocol #RCE #remote code execution #Root Access #Telnetd #zero_day 2026
Penetration Testing Tools
Root Without a Password: The 9.8 CVSS "Ghost in the Shell" Exploit Haunting GNU Telnet
CVE-2026-32746: A critical 9.8 CVSS flaw in GNU Telnet allows unauthenticated root access via port 23. Learn why this "Ghost" exploit is an existential threat.
13 views
Daily Writeups
⤷ Title: The ClickFix Trap: How “MacSync” Infostealers Hijack the Developer Terminal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:59:36 +0000
════════════════════════
⌗ Tags: #Malware #ChatGPT Atlas #ClickFix #Cyber Security 2026 #GoogleFix #InstallFix #KongTuke #macOS Infostealer #MacSync #ModeloRAT #Sophos #Terminal Malware
Penetration Testing Tools
The ClickFix Trap: How "MacSync" Infostealers Hijack the Developer Terminal
The forensic savants at Sophos have chronicled a burgeoning wave of cyber offensives wherein digital marauders proliferate the
14 views
Daily Writeups
⤷ Title: The Missile Strike Snare: How Mustang Panda Exploited Geopolitical Chaos to Strike the Gulf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:58:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bahrain #Chinese APT #Cyber Espionage 2026 #DLL side_loading #Gulf Nations #Middle East Conflict #Mustang Panda #phishing #PlugX #Qatar #UAE #Zscaler ThreatLabz
Penetration Testing Tools
The Missile Strike Snare: How Mustang Panda Exploited Geopolitical Chaos to Strike the Gulf
Forensic savants at Zscaler have chronicled a nascent wave of cyber offensives tethered to a Chinese syndicate, resolutely
13 views
Daily Writeups
⤷ Title: Poisoned Play: FBI Seeks Victims of Massive Malware Campaign Hiding in Steam Indie Games
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:54:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlockBlasters #Chemia #Cybercrime 2026 #DashFPS #Dashverse #FBI #Infostealer #Lampy #Lunara #malware #PirateFi #Seattle FBI #Steam #Tokenova #Victim Services
Penetration Testing Tools
Poisoned Play: FBI Seeks Victims of Massive Malware Campaign Hiding in Steam Indie Games
The Federal Bureau of Investigation is profoundly broadening its inquiry into the proliferation of malicious software across the
15 views
Daily Writeups
⤷ Title: Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:07:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ConnectWise #Cryptographic Keys #CVE_2026_3564 #cybersecurity #infosec #Patch Alert #Remote Access #ScreenConnect #Server Security #Vulnerability
Daily CyberSecurity
Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
A critical 9.0 CVSS vulnerability (CVE-2026-3564) in ConnectWise ScreenConnect exposes server cryptographic keys. On-premise users must update to 26.1 now.
18 views
Daily Writeups
⤷ Title: # İnsan Beyni Hacklənə bilərmi? Neural Chip, AI və Gələcəyin Kibertəhlükəsizliyi
════════════════════════
𐀪 Author: cybershieldy.com
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:32:16 GMT
════════════════════════
⌗ Tags: #hacking #hacker #cybersecurity #siber #kiber_tehluke
Medium
# 🧠 İnsan Beyni Hacklənə bilərmi? Neural Chip, AI və Gələcəyin Kibertəhlükəsizliyi
Texnologiya sürətlə dəyişir. Amma artıq əsas sual dəyişib:
25 views
Daily Writeups
⤷ Title: One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
════════════════════════
𐀪 Author: Harveen Kaur
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:18:30 GMT
════════════════════════
⌗ Tags: #hacking #digital_security #technology #cybersecurity #passwords
Medium
One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
One Password, Multiple Accounts: A Digital Disaster Waiting to Happen
21 views
Daily Writeups
⤷ Title: How to Answer the Security Question in Your Series A Pitch
════════════════════════
𐀪 Author: Cyphersilhouette
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #hacking #compliance #cybersecurity #software_development
Medium
How to Answer the Security Question in Your Series A Pitch
Investors who have seen portfolio company breaches now ask specific follow-ups. Here’s what a credible answer actually sounds like
16 views
Daily Writeups
⤷ Title: The AI Arms Race in Cybersecurity: When Attackers and Defenders Both Wield the Same Weapon
════════════════════════
𐀪 Author: Zineb Hidila, PhD
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:30:07 GMT
════════════════════════
⌗ Tags: #agentic_ai #machine_learning #infosec #cybersecurity #ai
Medium
The AI Arms Race in Cybersecurity: When Attackers and Defenders Both Wield the Same Weapon
How artificial intelligence became the most disruptive force in cybersecurity — simultaneously enabling attacks at unprecedented scale and…
14 views
Daily Writeups
⤷ Title: Nessus | TryHackMe Answers
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 10:57:19 GMT
════════════════════════
⌗ Tags: #tryhackme_answer #nessus #vulnerability_scanner #cybersecurity #penetration_testing
Medium
Nessus | TryHackMe Answers
Learn how to set up and use Nessus, a popular vulnerability scanner.
22 views
Daily Writeups
⤷ Title: A Guide to Server-Side Template Injection (SSTI)
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 10:55:45 GMT
════════════════════════
⌗ Tags: #ssti #penetration_testing #ethical_hacking #web_security #cybersecurity
Medium
A Guide to Server-Side Template Injection (SSTI)
Server-Side Template Injection (SSTI) is a critical web vulnerability that increasingly targets modern web applications. Insecure…
16 views
Daily Writeups
⤷ Title: Dev Diaries CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:32:53 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #ctf_walkthrough #tryhackme_writeup #ctf_writeup
Medium
Dev Diaries CTF Notes | TryHackMe
Git and OSINT steps to solve Dev Diaries challenge
27 views
Daily Writeups
⤷ Title: SOC from Scratch #7 — Hands-On Labs for SOC Beginners (Free Platforms & Realistic Scenarios)
════════════════════════
𐀪 Author: Shane Samuel
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #soc_analyst #blue_team #tryhackme #cybersecurity_lab
Medium
SOC from Scratch #7 — Hands-On Labs for SOC Beginners (Free Platforms & Realistic Scenarios)
You can read about cybersecurity all day. You can memorize tools, definitions, and frameworks.
25 views
Daily Writeups
⤷ Title: 7 Wireshark Filters That Instantly Make You Look Like a Network Expert
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:21:39 GMT
════════════════════════
⌗ Tags: #coding #cybersecurity #ethical_hacking #technology #programming
Medium
7 Wireshark Filters That Instantly Make You Look Like a Network Expert
Stop staring at noise, start seeing real signals
21 views
Daily Writeups
⤷ Title: OWASP Top Ten #9 & #10: Finishing Strong
════════════════════════
𐀪 Author: Angela
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 11:29:43 GMT
════════════════════════
⌗ Tags: #ssrf #owasp_top_10 #security_logging
Medium
OWASP Top Ten #9 & #10: Finishing Strong
When I first started learning about information security and made the decision to start writing, I knew I wanted to be consistent with it…
29 views
Daily Writeups
⤷ Title: Burp Storage Issue? Here’s the Actual Fix
════════════════════════
𐀪 Author: Likith Teki
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:58:40 GMT
════════════════════════
⌗ Tags: #burpsuite #bugbounty_writeup #cybersecurity #web_security
Medium
🚨 Burp Storage Issue? Here’s the Actual Fix
Hello fellow hunters, hope you’re all doing great! If you’ve been using Burp Suite for web application testing or bug bounty hunting…
47 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: ‘RegPwn’ Flaw Grants SYSTEM Access via Windows Accessibility
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:05:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_24291 #cybersecurity #infosec #Local Privilege Escalation #Microsoft Patch Tuesday #PoC Exploit #RegPwn #SYSTEM access #vulnerability disclosure #Windows Security
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 'RegPwn' Flaw Grants SYSTEM Access via Windows Accessibility
Exploit code and details for RegPwn (CVE-2026-24291) are publicly disclosed. The Windows local privilege escalation flaw grants attackers SYSTEM access.
39 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Schneider Electric Flaw Exposes SCADA and Data Center Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 13:01:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_13957 #CVE_2026_0667 #cybersecurity #EcoStruxure #ICS Vulnerability #infosec #Remote Code Execution #SCADA Security #SCADAPack #Schneider Electric
Daily CyberSecurity
Critical 9.8 CVSS Schneider Electric Flaw Exposes SCADA and Data Center Systems
Schneider Electric patches a critical 9.8 CVSS flaw (CVE-2026-0667) in SCADAPack RTUs and EcoStruxure Data Center Expert. Update to secure your systems.
24 views
Daily Writeups
⤷ Title: How to Lead Effective Tabletops
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Backdoors & Breaches #Fun & Games #Guest Author #How_To #How to #Infosec for Beginners #InfoSec Survival Guide #Tips and Tricks
Black Hills Information Security, Inc.
How to Lead Effective Tabletops - Black Hills Information Security, Inc.
Learn how to transform boring, meeting-style security tabletop exercises into engaging real-world scenario simulations.
13 views
Daily Writeups
⤷ Title: BOLA (IDOR) Vulnerability in a Comment Approval System
════════════════════════
𐀪 Author: Muhammet Yasin Ağzıkuru
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:41:43 GMT
════════════════════════
⌗ Tags: #idor #cybersecurity #bug_bounty
Medium
BOLA (IDOR) Vulnerability in a Comment Approval System
Hi, I’m Yasin Ağzıkuru. Today I want to tell you about a BOLA(IDOR) vulnerability I found in a web application.
14 views
Daily Writeups
⤷ Title: 7 Reports, 4 Duplicates, and Zero Bounties — My First 3 Months in Bug Bounty Hunting
════════════════════════
𐀪 Author: Sreenivasan Sivakumar
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:32:44 GMT
════════════════════════
⌗ Tags: #tryhackme #ethical_hacking #cybersecurity #bug_bounty
Medium
7 Reports, 4 Duplicates, and Zero Bounties — My First 3 Months in Bug Bounty Hunting
Let me save you the suspense. I have not earned a single bounty yet. Not one rupee. Not one dollar. And I am writing about it anyway…
11 views