Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Fingerprint First: A Structured Web App Recon-to-Exploit Framework
════════════════════════
𐀪 Author: WolfSec
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 19:42:27 GMT
════════════════════════
⌗ Tags: #pentesting #web_security #offensive_security #hacking #bug_bounty
Medium
Fingerprint First: A Structured Web App Recon-to-Exploit Framework
Before you probe anything, you need to know what you're looking at. Here's a repeatable, technology-aware methodology — from passive header…
34 views
Daily Writeups
⤷ Title: Jerry | HackTheBox | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 19:25:59 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #technology #bug_bounty_tips #ethical_hacking
Medium
Jerry | HackTheBox | OSCP Preparation
HTB:Jerry
29 views
Daily Writeups
⤷ Title: Reflected XSS in HTML Context: A Simple Yet Dangerous Vulnerability (Portswigger)
════════════════════════
𐀪 Author: Shayaan Khan
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 20:26:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #coding #programming #cybersecurity #hacking
Medium
Reflected XSS in HTML Context: A Simple Yet Dangerous Vulnerability (Portswigger)
Introduction
21 views
Daily Writeups
⤷ Title: 6+ Ways to Spot an AI Phishing Email in 2026
════════════════════════
𐀪 Author: Lily C
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 17:45:04 GMT
════════════════════════
⌗ Tags: #programming #hacking #technology #artificial_intelligence #cybersecurity
Medium
6+ Ways to Spot a Phishing Email in 2026
With the use of AI, spotting one is even more challenging.
24 views
Daily Writeups
⤷ Title: FTP Enumeration & Exploitation: A Complete Step-by-Step Guide (HTB)
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 19:54:47 GMT
════════════════════════
⌗ Tags: #network_security #cybersecurity #nmap #penetration_testing #ethical_hacking
Medium
FTP Enumeration & Exploitation: A Complete Step-by-Step Guide (HTB)
Introduction to FTP (File Transfer Protocol)
19 views
Daily Writeups
⤷ Title: Attacking common services-skill assesment HTB
════════════════════════
𐀪 Author: Muhammad Mateen
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 19:12:50 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #hackthebox #enumeration #cybersecurity #penetration_testing
Medium
Attacking common services-skill assesment HTB
Question
24 views
Daily Writeups
⤷ Title: FowSniff | TryHackMe
════════════════════════
𐀪 Author: Gerald
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 19:31:33 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #ctf
Medium
FowSniff | TryHackMe
In this walkthrough, I showcase the techniques I used to root the FowSniff Machine.
28 views
Daily Writeups
⤷ Title: Web Uygulamalarında Veri Giriş Güvenliği: HTML Injection ve XSS Analizi
════════════════════════
𐀪 Author: Adar Aydinoglu
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:27:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty
Medium
Web Uygulamalarında Veri Giriş Güvenliği: HTML Injection ve XSS Analizi
Web uygulamalarında kullanıcıdan alınan verinin nasıl işlendiği kritik bir konudur. Gerekli kontroller yapılmazsa, bu veriler üzerinden…
32 views
Daily Writeups
⤷ Title: Secured by STM, huh?
════════════════════════
𐀪 Author: Isaac Privett
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:07:18 GMT
════════════════════════
⌗ Tags: #hacking #artificial_intelligence #penetration_testing #cybersecurity
Medium
Secured by STM, huh?
Sometimes things line up in a way that feels almost… suspiciously perfect.
22 views
Daily Writeups
⤷ Title: OWASP Top 10 (2025) — Tryhackme (FR)
════════════════════════
𐀪 Author: Khalil
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 21:37:42 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #owasp_top_10_2025 #tryhackme #tryhackme_writeup #hacking
Medium
OWASP Top 10 (2025) — Tryhackme (FR)
Introduction :
19 views
Daily Writeups
⤷ Title: Vulnerability Data Enrichment for CVE Records: 258 CNAs on the Enrichment Recognition List for…
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:44:53 GMT
════════════════════════
⌗ Tags: #information_security #information_technology #cybersecurity #vulnerability #infosec
Medium
Vulnerability Data Enrichment for CVE Records: 258 CNAs on the Enrichment Recognition List for…
The “CNA Enrichment Recognition List” for April 6, 2026, is now available with 258 CNAs listed. Published monthly on the CVE website, the…
18 views
Daily Writeups
⤷ Title: How I Built NullScore: Combining CVSS, EPSS, KEV, and PoC Into One Vulnerability Risk Score
════════════════════════
𐀪 Author: Sam0t
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:21:58 GMT
════════════════════════
⌗ Tags: #pentesting #infosec #cybersecurity #security #ai
Medium
How I Built NullScore: Combining CVSS, EPSS, KEV, and PoC Into One Vulnerability Risk Score
The problem with how most people prioritize CVEs
17 views
Daily Writeups
⤷ Title: Cloud Security and SaaS Supply Chain Attacks
════════════════════════
𐀪 Author: Joshua Moses
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:06:01 GMT
════════════════════════
⌗ Tags: #technology #business #money #penetration_testing #cybersecurity
Medium
Cloud Security and SaaS Supply Chain Attacks
By Joshua Moses
16 views
Daily Writeups
⤷ Title: TryHackMe — TakeOver CTF Writeup
════════════════════════
𐀪 Author: Aryan Vij
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 21:09:49 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #cybersecurity
Medium
TryHackMe — TakeOver CTF Writeup
Platform: TryHackMe | Difficulty: Easy | Category: Web / Subdomain Enumeration
25 views
Daily Writeups
⤷ Title: Your Android App’s API Keys Are Not Safe - Here’s What to Do Instead
════════════════════════
𐀪 Author: Bhagirath Devmurari
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 22:55:30 GMT
════════════════════════
⌗ Tags: #kotlin #android_app_development #cybersecurity #api_security #mobile_app_security
Medium
Your Android App’s API Keys Are Not Safe - Here’s What to Do Instead
Hardcoding API keys in your Android app is like leaving your front door unlocked. In this guide, you’ll learn certificate pinning, runtime…
29 views
Daily Writeups
⤷ Title: The Ministry of Silly Walks Presents: Walking the PEB
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 00:14:22 GMT
════════════════════════
⌗ Tags: #malware #hacking #red_team #cybersecurity
Medium
The Ministry of Silly Walks Presents: Walking the PEB
Walking the PEB for Windows Process Injection
25 views
Daily Writeups
⤷ Title: Stuxnet: The Virus That Sabotaged Iran’s Nuclear Program and the Future of Cyberwarfare
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #technology #cyberattack #hacking
Medium
Stuxnet: The Virus That Sabotaged Iran’s Nuclear Program and the Future of Cyberwarfare
Technical Analysis of Stuxnet: How Four Zero-Day Vulnerabilities Managed to Sabotage Critical Infrastructure in Natanz.
28 views
Daily Writeups
⤷ Title: HackTheBox — Pirate: Pre2k, gMSA, RBCD, WriteSPN, and the Road to Domain Admin
════════════════════════
𐀪 Author: T0NY_8
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 23:08:43 GMT
════════════════════════
⌗ Tags: #hard #hackthebox_writeup #walktrough #active_directory #pirates
Medium
HackTheBox — Pirate: Pre2k, gMSA, RBCD, WriteSPN, and the Road to Domain Admin
Difficulty: Hard | OS: Windows | Category: Active Directory Tags: pre2k · gMSA · RBCD · PetitPotam · S4U2Proxy · Ligolo-ng · ntlmrelayx ·…
29 views
Daily Writeups
⤷ Title: APT28 Hijacks Home Routers to Steal Corporate Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:20:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #APT28 #CVE_2023_50224 #cybersecurity #DNS hijacking #Fancy Bear #GRU #MikroTik #NCSC #OAuth Theft #router security #TP_Link
Daily CyberSecurity
APT28 Hijacks Home Routers to Steal Corporate Credentials
NCSC unmasks APT28’s "digital funnel" using router DNS hijacking to steal OAuth tokens and passwords. Protect your remote workforce—patch your routers now.
29 views
Daily Writeups
⤷ Title: Venom Stealer Bypasses Chrome and “Auto-Cracks” Tonkeeper Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:14:54 +0000
════════════════════════
⌗ Tags: #Malware #Chrome Bypass #ClickFix #crypto drainer #cybersecurity #infosec #MaaS #Malware Analysis #Tonkeeper #UAC Elevation #Venom Stealer #Wallet Cracking
Daily CyberSecurity
Venom Stealer Bypasses Chrome and "Auto-Cracks" Tonkeeper Wallets
Venom Stealer is a new C++ MaaS targeting crypto wallets like Tonkeeper. It features silent UAC elevation and Chrome encryption bypass. Learn how to defend.
17 views
Daily Writeups
⤷ Title: The 1,700-Package Blitz: North Korea’s “Contagious Interview” Infiltrates Every Major Dev Registry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #cybersecurity #go #infosec #Malicious packages #malware loader #North Korea #npm #php #PyPI #Rust #Socket #supply chain attack
Daily CyberSecurity
The 1,700-Package Blitz: North Korea’s "Contagious Interview" Infiltrates Every Major Dev Registry
North Korea’s "Contagious Interview" campaign expands to 1,700+ malicious packages across npm, PyPI, and more. Learn how to protect your dev environment.
16 views