Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: TryHackMe | Water Bottle | CTF | Writeup
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 04:35:00 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #water_bottle #osint #ctf_writeup
Medium
TryHackMe | Water Bottle | CTF | Writeup
“After returning to my hometown, I needed a water refill from a station I frequently used until 2014, but I’ve forgotten its name and…
25 views
Daily Writeups
⤷ Title: Husky Hack Labs is now up!
════════════════════════
𐀪 Author: The Husky Hacker
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 04:47:32 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #ethical_hacking #cybersecurity #education
Medium
Husky Hack Labs is now up!
I had some extra time today, and I got the website ready and the first course up. It's a basic guide to setting up Kali and VMs, and this…
31 views
Daily Writeups
⤷ Title: Ethical Hacking: The Smart Way to Fight Cybercrime
════════════════════════
𐀪 Author: khadeeja
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 03:11:13 GMT
════════════════════════
⌗ Tags: #soc_analyst_course #cyberattack #ethical_hacking #cybersecurity #soc_analyst
Medium
Ethical Hacking: The Smart Way to Fight Cybercrime
In a world where almost everything is connected to the internet, cybersecurity has become more important than ever. From social media…
39 views
Daily Writeups
⤷ Title: Operation DualScript Bypasses Defenses to Hijack Crypto and Cash
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:02:53 +0000
════════════════════════
⌗ Tags: #Malware #banking malware #Clipboard Hijacker #Crypto theft #cybersecurity #In_Memory Payloads #infosec #living_off_the_land #Operation DualScript #Remote Access Trojan #RetroRAT #Windows Security
Daily CyberSecurity
Operation DualScript Bypasses Defenses to Hijack Crypto and Cash
Operation DualScript uses parallel execution to bypass defenses, hijacking crypto wallets and banking data via RetroRAT and clipboard swapping.
38 views
Daily Writeups
⤷ Title: [CMSpit] — Cockpit CMS RCE, MongoDB Exposure and Privilege Escalation via Vulnerable ExifTool
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:26:03 GMT
════════════════════════
⌗ Tags: #exiftool #rce #bug_bounty #cockpit_cms #privilege_escalation
Medium
[CMSpit] — Cockpit CMS RCE, MongoDB Exposure and Privilege Escalation via Vulnerable ExifTool
Chaining RCE, database misconfiguration, and metadata parsing flaws to achieve full system compromise.
27 views
Daily Writeups
⤷ Title: Bug Bounty: JSONP Callback Vulnerability Explained
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:22:38 GMT
════════════════════════
⌗ Tags: #xs #xss_vulnerability #jsonp #bug_bounty_tips #bug_bounty
Medium
🐞 Bug Bounty: JSONP Callback Vulnerability Explained
Bug bounty hunting is one of the most exciting ways to earn money while improving your cybersecurity skills. In this blog, we’ll explore a…
21 views
Daily Writeups
⤷ Title: Bug Bounties in the AI Era: New Attack Surfaces, New Opportunities
════════════════════════
𐀪 Author: Vijay Kumar Gupta
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 05:30:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #careers #bug_bounty #bug_bounty_tips
Medium
Bug Bounties in the AI Era: New Attack Surfaces, New Opportunities
The security world has always changed when new technology becomes mainstream. Cloud created new misconfigurations. Mobile created new…
20 views
Daily Writeups
⤷ Title: Burp, AI, and you!
════════════════════════
𐀪 Author: Alex Thines
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 05:09:03 GMT
════════════════════════
⌗ Tags: #claude_code #burpsuite #hacking #ai #mcps
Medium
Burp, AI, and you!
How to use LLMs to look into your burp projects!
22 views
Daily Writeups
⤷ Title: Directory Traversal Attacks: How Hackers Read Server Files
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:38:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #ethical_hacking #web_development #infosec
Medium
Directory Traversal Attacks: How Hackers Read Server Files
What is a Directory Traversal Attack?
24 views
Daily Writeups
⤷ Title: Security Misconfiguration: The Silent Killer of Web Security
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:01:54 GMT
════════════════════════
⌗ Tags: #hackerone #cybersecurity #information_security #infosec #ethical_hacking
Medium
Security Misconfiguration: The Silent Killer of Web Security
What is Security Misconfiguration ?
19 views
Daily Writeups
⤷ Title: Importance of Good Scoping in Penetration Testing
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:34:40 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #information_security #penetration_testing #cybersecurity #ethical_hacking
Medium
Importance of Good Scoping in Penetration Testing
Penetration testing is one of the most effective ways to evaluate an organization’s real-world security posture. However, even the most…
31 views
Daily Writeups
⤷ Title: The Asset You Forgot Is the One Subfinder Will Find First
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 06:38:35 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #ethical_hacking #coding #programming
27 views
Daily Writeups
⤷ Title: Living Off the SaaS: How Attackers Abuse Trusted Applications to Stay Invisible
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 05:55:47 GMT
════════════════════════
⌗ Tags: #cloud #ai #ethical_hacking #saas #cybersecurity
Medium
Living Off the SaaS: How Attackers Abuse Trusted Applications to Stay Invisible
Introduction: The New Age of Invisible Cyber Attacks
37 views
Daily Writeups
⤷ Title: a single operational law that you can apply immediately.
════════════════════════
𐀪 Author: SonOfClawDraws
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 05:03:39 GMT
════════════════════════
⌗ Tags: #leadership #life_lessons #technology #ethical_hacking #productivity
Medium
a single operational law that you can apply immediately.
A rule of power.
46 views
Daily Writeups
⤷ Title: BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:29:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Double Agents in the Cloud: Unit 42 Unmasks Critical AI Vulnerabilities in Google Vertex AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:16:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #data exfiltration #Double Agents #GCP Security #Google Cloud Platform #infosec #P4SA #Python Pickle #rce #Service Accounts #Unit 42 #Vertex AI
Daily CyberSecurity
Double Agents in the Cloud: Unit 42 Unmasks Critical AI Vulnerabilities in Google Vertex AI
Unit 42 reveals how GCP Vertex AI agents can become "double agents," exfiltrating data and accessing Google’s internal code. Learn why BYOSA is essential.
42 views
Daily Writeups
⤷ Title: The “Special Invitation” Trap: STAC6405 Abuses Legitimate RMM Tools to Hijack Your PC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 07:30:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #infosec #LogMeIn Resolve #Microsoft Teams Lure #Norton Mimicry #phishing #Punchbowl Lure #Remote Access #RMM Abuse #ScreenConnect #Sophos MDR #STAC6405
Daily CyberSecurity
The "Special Invitation" Trap: STAC6405 Abuses Legitimate RMM Tools to Hijack Your PC
Sophos MDR uncovers STAC6405, a phishing campaign abusing RMM tools like LogMeIn for unattended access. Learn how to spot the "Special Invitation" lure.
21 views
Daily Writeups
⤷ Title: Password Spraying Campaigns: 12 Lessons Learned to Outsmart Attackers and Secure Your Org
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:04:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #passwords #cybersecurity #penetration_testing #hacking
Medium
Password Spraying Campaigns: 12 Lessons Learned to Outsmart Attackers and Secure Your Org
Ever wondered why some of the world’s biggest breaches start with a simple, lazy password guess? It’s not magic. It’s password spraying —…
22 views
Daily Writeups
⤷ Title: One of the Most Notorious Child Sexual Abuse Material Platforms, DarkScandals, Collapsed with Its…
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:35:43 GMT
════════════════════════
⌗ Tags: #cybercrime #child_abuse #hacking #darkweb #csam
Medium
One of the Most Notorious Child Sexual Abuse Material Platforms, DarkScandals, Collapsed with Its Administrator Mr. Dark
DarkScandals was not simply another hidden website operating at the fringes of the internet. It was a deliberately engineered criminal…
16 views
Daily Writeups
⤷ Title: Protect Your Phone: Guard the One You Can’t Live Without
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 07:19:24 GMT
════════════════════════
⌗ Tags: #phone_security #cyber_security_awareness #asrbd #hacking
Medium
Protect Your Phone: Guard the One You Can’t Live Without
Let’s be honest.
16 views
Daily Writeups
⤷ Title: Phishing Analysis Fundamentals | THM Walkthrough
════════════════════════
𐀪 Author: Deepika B
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:11:12 GMT
════════════════════════
⌗ Tags: #phishing #tryhackme_walkthrough #learning #cybersecurity #tryhackme
Medium
Phishing Analysis Fundamentals | THM
Phishing Analysis Fundamentals | THM Task 1 : Introduction spam and Phishing are common social engineering attacks. In social engineering, phishing attack vectors can be a phone call, a text message …
22 views