Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Stop Calling Prompt Injection a Vulnerability. You’re Wrong.
════════════════════════
𐀪 Author: IdeaGlider
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 10:54:51 GMT
════════════════════════
⌗ Tags: #ai #writing #technology #chatgpt #hacking
Medium
Stop Calling Prompt Injection a Vulnerability. You’re Wrong.
We are fixing AI security all wrong. Here is why prompt injection is actually just a delivery mechanism, and how to stop playing…
23 views
Daily Writeups
⤷ Title: How to do Delegation Attacks on Active Directory.
════════════════════════
𐀪 Author: Zoroya
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 10:54:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #active_directory #cybersecurity #pentesting #hacking
Medium
How to do Delegation Attacks on Active Directory.
Delegation is a feature in Active Directory allow a service to impersonate users when accessing other services. A small misconfiguration…
20 views
Daily Writeups
⤷ Title: TryHackMe: Missing Person Writeup (OSINT Investigation)
════════════════════════
𐀪 Author: Atharva
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 12:24:27 GMT
════════════════════════
⌗ Tags: #tryhackme #osint #cybersecurity #ethical_hacking #ctf
Medium
TryHackMe: Missing Person Writeup (OSINT Investigation)
Room Link: https://tryhackme.com/room/missingperson
26 views
Daily Writeups
⤷ Title: TryHackMe Steel Mountain Walkthrough By Ryan Cham
════════════════════════
𐀪 Author: Ryan Cham Rui Yang
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 12:15:43 GMT
════════════════════════
⌗ Tags: #oscp #oscp_preparation #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Steel Mountain Walkthrough By Ryan Cham
damn thats a ton of ports. We visit the port 80 first
29 views
Daily Writeups
⤷ Title: The Ultimate Guide to Ethical Hacking: Protecting the Digital Frontier
════════════════════════
𐀪 Author: Blogmaster
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 11:47:05 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
The Ultimate Guide to Ethical Hacking: Protecting the Digital Frontier
​In an era where a single data breach can cost a company an average of $4.45 million, the demand for "good guy" hackers has never been…
43 views
Daily Writeups
⤷ Title: [Technical Analysis] Critical Business Logic Flaw Chain Leading to Account Takeover (ATO) via OAUTH…
════════════════════════
𐀪 Author: Tthanhkhoa
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 12:21:08 GMT
════════════════════════
⌗ Tags: #account_takover #bugbounty_tips #api_security
Medium
[Technical Analysis] Critical Business Logic Flaw Chain Leading to Account Takeover (ATO) via OAUTH and Email Change Flow
Short Description: An attacker can take over any account ([email protected]) solely under the condition that the victim has NOT yet…
❤1
60 views
Daily Writeups
⤷ Title: ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 19:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
53 views
Daily Writeups
⤷ Title: New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 18:13:00 +0530
════════════════════════
⌗ Tags: No_Tags
49 views
Daily Writeups
⤷ Title: CISO Whisperer Names 11 Vendors Leading the Shift from Tools to Outcomes at RSA Conference 2026
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:07:10 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
CISO Whisperer Names 11 Vendors Leading the Shift from Tools to Outcomes at RSA Conference 2026
Austin, United States, 19th March 2026, CyberNewswire
35 views
Daily Writeups
⤷ Title: Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:40:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_33001 #CVE_2026_33002 #DevSecOps #DNS Rebinding #Jenkins #LoadNinja #Patch Alert #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
Jenkins patches critical flaws (CVE-2026-33001 & CVE-2026-33002) allowing remote code execution and full CI/CD pipeline compromise. Update to 2.555 now.
21 views
Daily Writeups
⤷ Title: High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:05:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian Bamboo #Bamboo Data Center #CI/CD security #CVE_2026_21570 #cybersecurity #DevSecOps #Patch Alert #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments
Atlassian warns of a high-severity RCE vulnerability (CVE-2026-21570) in Bamboo Data Center. Patch now to secure your CI/CD pipelines from malicious code.
23 views
Daily Writeups
⤷ Title: Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:30:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_31938 #cybersecurity #HTML Injection #infosec #JavaScript Security #jsPDF #Vulnerability #web development #XSS
Daily CyberSecurity
Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
A critical 9.6 CVSS vulnerability in jsPDF (CVE-2026-31938) allows attackers to inject malicious scripts via XSS. Update to version 4.2.1 immediately.
22 views
Daily Writeups
⤷ Title: CISO Whisperer Names 11 Vendors Leading the Shift from Tools to Outcomes at RSA Conference 2026
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:07:26 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
CISO Whisperer Names 11 Vendors Leading the Shift from Tools to Outcomes at RSA Conference 2026
Austin, United States, 19th March 2026, CyberNewswire
21 views
Daily Writeups
⤷ Title: SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:00:44 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft
Austin, TX, USA, 19th March 2026, CyberNewswire
35 views
Daily Writeups
⤷ Title: Wi-Fi Exploitation IV — Lock It Down or Lose It All
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:38:50 GMT
════════════════════════
⌗ Tags: #programming #ethical_hacking #networking #bug_bounty #cybersecurity
Medium
Wi-Fi Exploitation IV — Lock It Down or Lose It All
The complete defense playbook: how to harden, monitor, detect attacks in real time, respond to a breach, and understand where wireless…
23 views
Daily Writeups
⤷ Title: CVSS Scores Demystified: How Ethical Hackers Earn Big in Bug Bounty Programs
════════════════════════
𐀪 Author: Bugitrix
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:14:09 GMT
════════════════════════
⌗ Tags: #vulnerability #attack #bug_bounty_tips #bug_bounty #cybersecurity
Medium
🚀 CVSS Scores Demystified: How Ethical Hackers Earn Big in Bug Bounty Programs
Bug bounty hunting is one of the hottest fields in ethical hacking, and payouts often depend on one thing: the CVSS score. If you’ve ever…
25 views
Daily Writeups
⤷ Title: CORS and CSRF Vulnerabilities
════════════════════════
𐀪 Author: Damilola Faith Ashiedu
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:57:01 GMT
════════════════════════
⌗ Tags: #cross_origin #cybersecurity #application_security #cors #csrf
Medium
CORS and CSRF Vulnerabilities
Hands-on documentation of Cross Origin — CORS and CSRF exploitation across two vulnerable applications, bWAPP for CORS misconfiguration and…
23 views
Daily Writeups
⤷ Title: Perjalanan dan pengalaman OSCP yang mengesankan
════════════════════════
𐀪 Author: xpl0dec
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:34:20 GMT
════════════════════════
⌗ Tags: #offensive_security #oscp_preparation #oscp #offsec #hacking
Medium
Perjalanan dan pengalaman OSCP yang mengesankan
Saat artikel ini dibuat, saya sudah bersertifikasi OSCP dan tujuan artikel ini hanya untuk berbagi pengalaman bagaimana saya bisa lulus dan…
25 views
Daily Writeups
⤷ Title: [DEEP RESEARCH] How Malware Uses Solana and EVM Chains to Rotate C2 Without Burning Infrastructure
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:46:00 GMT
════════════════════════
⌗ Tags: #c2 #solana_network #infosec #cryptocurrency #threat_intelligence
Medium
[DEEP RESEARCH] How Malware Uses Solana and EVM Chains to Rotate C2 Without Burning Infrastructure
Everyone loves saying “blockchain C2” because it sounds futuristic and vaguely terrifying. Cute. The real trick is dumber and more useful…
25 views
Daily Writeups
⤷ Title: Small Businesses Are Drowning in Threat Intelligence They Can’t Use.
════════════════════════
𐀪 Author: Okorieprincegeorge
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #small_business #artificial_intelligence #infosec #information_technology
Medium
Small Businesses Are Drowning in Threat Intelligence They Can’t Use. Here’s What I’m Doing About It.
Go to the National Vulnerability Database right now and try to open it on a random day. What you will see is hundreds of CVEs, severity…
26 views
Daily Writeups
⤷ Title: LLM Vulnerabilities — Data and Model Poisoning : Garak
════════════════════════
𐀪 Author: Tanmay Bhattacharjee
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:57:59 GMT
════════════════════════
⌗ Tags: #red_team #generative_ai_tools #cybersecurity #llm_security #infosec
Medium
LLM Vulnerabilities — Data and Model Poisoning : Garak
From package hallucination to DAN attacks: what each threat means and how Garak exposes it
27 views