Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CTF — Kali Linux & Serveur Vulnérable
════════════════════════
𐀪 Author: Karmendra Mungrah
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:36:24 GMT
════════════════════════
⌗ Tags: #ctf #linux #cybersecurity #kali_linux #hacking
Medium
CTF — Kali Linux & srv-alien
Contexte :
11 views
Daily Writeups
⤷ Title: Lab: CSRF with broken Referer validation
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:19:11 GMT
════════════════════════
⌗ Tags: #portswigger #hacking #portswigger_lab #cybersecurity
Medium
Lab: CSRF with broken Referer validation
This post = no theory, only practical + all confusing parts explained clearly
10 views
Daily Writeups
⤷ Title: This Week I Learned — Hacking DVDs, Mussolini’s Documents, Which AI to Use
════════════════════════
𐀪 Author: Alberto Piras
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #history #technology #hacking #ai #lifestyle
Medium
This Week I Learned — Hacking DVDs, Mussolini’s Documents, Which AI to Use
A short roundup of the things that caught my attention and taught me something new.
28 views
Daily Writeups
⤷ Title: Understanding CWE-613: Insufficient Session Expiration
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #infosec #cwe #cybersecurity #software_development #hacking
Medium
Understanding CWE-613: Insufficient Session Expiration
When a user logs into a web application, the server creates a session to track their authenticated state. This session is typically…
15 views
Daily Writeups
⤷ Title: $285 million stolen in 12 minutes. Through social engineering and patience.
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:06:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #cyber_security_awareness #infosec #cryptocurrency
Medium
$285 million stolen in 12 minutes. Through social engineering and patience.
Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security…
9 views
Daily Writeups
⤷ Title: If I Were an Attacker: Breaking Session Management Systems
════════════════════════
𐀪 Author: Mukut | Real-World Cybersecurity
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:46:01 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #web_security #ethical_hacking #penetration_testing
Medium
If I Were an Attacker: Breaking Session Management Systems
After authentication succeeds, a system needs a way to remember the user.
11 views
Daily Writeups
⤷ Title: Why VAPT Testing is No Longer Optional for Businesses in 2026: A Deep Dive with Qualysec
════════════════════════
𐀪 Author: Sunil Qualysec
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:39:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #vapt
Medium
Why VAPT Testing is No Longer Optional for Businesses in 2026: A Deep Dive with Qualysec
Why VAPT Testing is No Longer Optional for Businesses in 2026: A Deep Dive with Qualysec
In the rapidly evolving digital landscape of 2026…
11 views
Daily Writeups
⤷ Title: The Complete Penetration Testing Process: Step-by-Step Guide (Beginner to Pro)
════════════════════════
𐀪 Author: Tejas Kamble
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:18:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #pentesting #process #ethical_hacking
Medium
The Complete Penetration Testing Process: Step-by-Step Guide (Beginner to Pro)
Imagine a hacker trying to break into your system right now. Would they succeed? … In today’s digital world, cyberattacks are not just…
17 views
Daily Writeups
⤷ Title: Footprinting Lab — Easy (คนไทย)
════════════════════════
𐀪 Author: A8to
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:02:52 GMT
════════════════════════
⌗ Tags: #htb_footprinting_lab_th #information_security #penetration_testing #hackthebox #cybersecurity
Medium
Footprinting Lab — Easy (คนไทย)
สวัสดีครับผมออโต้ผมกำลังเรียนเรื่อง footprinting และกำลังจะเรียนของบทนี้จบผมอยากมาทำwrite up การเข้าไปดูของข้อนี้ครับ
21 views
Daily Writeups
⤷ Title: Lian_Yu writeup
════════════════════════
𐀪 Author: Ahmed Elbadry
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:54:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme
Medium
Lian_Yu writeup
task1:
14 views
Daily Writeups
⤷ Title: Water Bottle (THM) Tryhackme Full Walkthrough With Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 15:36:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ctf_writeup #osint #tryhackme
Medium
Water Bottle (THM) Tryhackme Full Walkthrough With Answer
Description : Track down a vanished water station using nothing but fragments of memory and OSINT.
15 views
Daily Writeups
⤷ Title: Kioptrix Level 3(Kioptrix 1.2) | 05/100
════════════════════════
𐀪 Author: Veetaragpatil
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #web_application_security #cybersecurity #vulnhub
Medium
Kioptrix Level 3(Kioptrix 1.2) | 05/100
1. Executive Summary
19 views
Daily Writeups
⤷ Title: What is IDOR? (Insecure Direct Object Reference) — With Simple Examples
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:56:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #cybersecurity #osint #bug_bounty
Medium
What is IDOR? (Insecure Direct Object Reference) — With Simple Examples
IDOR (Insecure Direct Object Reference) is a common web security vulnerability that happens when an application exposes internal object…
34 views
Daily Writeups
⤷ Title: Simulating Golden Ticket Attack on Active Directory : A SOC Lab Walkthrough
════════════════════════
𐀪 Author: ɧrιsнi rajeeѵ
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:20:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity_training #golden_ticket_attack #active_directory_attack #securityoperationsanalyst
Medium
Simulating Golden Ticket Attack on Active Directory : A SOC Lab Walkthrough
Forging a Kerberos Golden Ticket to Own a Domain Controller
47 views
Daily Writeups
⤷ Title: Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:16:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: Cloudflare Targets WordPress With New AI-Powered EmDash CMS
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:26:07 +0000
════════════════════════
⌗ Tags: #Security #Technology #AI #AI Bot #Artificial Intelligence #CloudFlare #CMS #Cybersecurity #EmDash #Matt Mullenweg #Wordpress
Hackread
Cloudflare Targets WordPress With New AI-Powered EmDash CMS
Cloudflare launches EmDash CMS, an AI-powered platform built to fix WordPress security flaws with sandboxed plugins, serverless scaling and passkey auth.
43 views
Daily Writeups
⤷ Title: Why Security Researchers and Red Teams Are Turning to Workflow Automation
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 13:34:04 +0000
════════════════════════
⌗ Tags: #Technology #Security #Automation #Red Team #Workflow
Hackread
Why Security Researchers and Red Teams Are Turning to Workflow Automation
Security researchers and red teams adopt workflow automation to cut alert fatigue, enrich data, and scale operations across SOC, intel and recon tasks.
27 views
Daily Writeups
⤷ Title: Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:30:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_3429 #CVE_2026_4636 #cybersecurity #IAM Security #infosec #Keycloak #MFA Bypass #Open Source Security #Token Theft #UMA #Vert.x
Daily CyberSecurity
Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers
Keycloak 26.5.7 fixes critical flaws including MFA bypass (CVE-2026-3429) and UMA token theft. Protect your IAM infrastructure—upgrade to the latest version.
22 views
Daily Writeups
⤷ Title: CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:03:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRM Security #CVE_2026_34838 #GroupOffice #Guzzle #infosec #Insecure Deserialization #PHP Security #POP Chain #rce #Vulnerability Research #Web Shell
Daily CyberSecurity
CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
CVE-2026-34838: A critical 10.0 flaw in GroupOffice allows authenticated users to trigger RCE via insecure deserialization. Update to v26.0.12 immediately!
17 views
Daily Writeups
⤷ Title: Critical RCE and SQLi Flaws Shatter mbCONNECT24 Industrial Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 13:11:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT@VDE #CVE_2026_33613 #firmware update #ICS security #Industrial Security #MB Connect Line #mbCONNECT24 #mymbCONNECT24 #rce #Remote Service Platform #sql injection #sqli
Daily CyberSecurity
Critical RCE and SQLi Flaws Shatter mbCONNECT24 Industrial Security
CERT@VDE warns of critical RCE and SQLi flaws in MB Connect Line's mbCONNECT24 (up to v2.19.4). Unauthenticated attackers can gain full system control. Patch now!
12 views