Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: OpenStack Keystone Flaw Grants Full S3 Access via Restricted Credentials, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:26:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloud Security #EC2 API #Identity Management #Keystone #Object Storage #OpenStack #privilege escalation #S3 Security #Swift3
Daily CyberSecurity
OpenStack Keystone Flaw Grants Full S3 Access via Restricted Credentials, PoC Available
OpenStack Keystone CVE-2026-33551 allows low-privilege users to bypass role restrictions and seize full S3 bucket control. Patch your cloud environment now!
22 views
Daily Writeups
⤷ Title: Palo Alto Networks Patches Trio of Security Flaws: From Agent Disabling to System Privileges
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADEM #Cortex XDR #CVE_2026_0232 #CVE_2026_0233 #CVE_2026_0234 #cybersecurity #infosec #Microsoft Teams #Palo Alto Networks #privilege escalation #XSIAM #XSOAR
Daily CyberSecurity
Palo Alto Networks Patches Trio of Security Flaws: From Agent Disabling to System Privileges
Palo Alto Networks patches critical flaws in Cortex XDR and ADEM, including a SYSTEM-level privilege escalation. Secure your security tools—patch today!
20 views
Daily Writeups
⤷ Title: Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:00:45 +0000
════════════════════════
⌗ Tags: #Technology #Bootloader #Code Signing #Driver Signature Enforcement #encryption #Microsoft #Mounir Idrassi #open_source #Tech News 2026 #UEFI #VeraCrypt #Windows 11
Daily CyberSecurity
Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.
23 views
Daily Writeups
⤷ Title: Web Application Security: Hands-On Practice (Chapter 19 from The Web Application Hacker’s Handbook)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:58:04 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #chapter_19 #web_application_security #burpsuite
Medium
Web Application Security: Hands-On Practice (Chapter 19 from The Web Application Hacker’s Handbook)
Note: This write-up reflects my learning and hands-on practice based on the book The Web Application Hacker’s Handbook: Discovering and…
30 views
Daily Writeups
⤷ Title: Simple — VulnHub Writeup
════════════════════════
𐀪 Author: Abacu5
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 04:01:58 GMT
════════════════════════
⌗ Tags: #walkthrough #vulnhub #oscp #cybersecurity #pentesting
Medium
Simple — VulnHub Writeup
Platform: VulnHub | Difficulty: Easy | OS: Linux (Ubuntu) | Author: Abacus
33 views
Daily Writeups
⤷ Title: Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:39:11 +0000
════════════════════════
⌗ Tags: #Malware #BRICKSTEAM #BRICKSTORM #ESXi #Hypervisor Security #infosec #Mandiant #Photon OS #threat intelligence #VCSA #virtualization #VMware Security #vSphere
Daily CyberSecurity
Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
Mandiant uncovers BRICKSTORM, a threat actor hiding in VMware vSphere for 393 days. Learn how to close the visibility gap and harden your ESXi infrastructure.
25 views
Daily Writeups
⤷ Title: ️ The 2026 Web3 Security Roadmap
════════════════════════
𐀪 Author: Tabrez Mukadam
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:01:02 GMT
════════════════════════
⌗ Tags: #blockchain #ethereum #web3 #bug_bounty #cybersecurity
Medium
🗺️ The 2026 Web3 Security Roadmap: How to Stop Chasing XSS and Start Auditing Smart Contracts
How to Stop Chasing XSS and Start Auditing Smart Contracts
21 views
Daily Writeups
⤷ Title: Case Study — Lessons from the Bangladesh Bank Heist
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:37:17 GMT
════════════════════════
⌗ Tags: #bangladesh_bank #bank_heist #hacking #asrbd
Medium
Case Study — Lessons from the Bangladesh Bank Heist
The $81 Million Mistake: What the Bangladesh Bank Heist Teaches Us About Cybersecurity
20 views
Daily Writeups
⤷ Title: Lab: DOM XSS in document.write sink using source location.search
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:32:15 GMT
════════════════════════
⌗ Tags: #walkthrough #cybersecurity #hacking #portswigger
Medium
Lab: DOM XSS in document.write sink using source location.search
I solved this lab using a pure practical approach, so I’ll explain exactly what I did and why no unnecessary theory, just what actually…
16 views
Daily Writeups
⤷ Title: The Digital Fortress: Why 2026 is the Year to Master Ethical Hacking in Delhi
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:30:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking
Medium
The Digital Fortress: Why 2026 is the Year to Master Ethical Hacking in Delhi
In the heart of India’s power corridor, a new kind of warfare is being waged. It doesn’t involve physical borders or traditional…
24 views
Daily Writeups
⤷ Title: numasec Wants to Be the Claude Code of Penetration Testing
════════════════════════
𐀪 Author: teum
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:58:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #devsecops #agents #open_source #security
Medium
numasec Wants to Be the Claude Code of Penetration Testing
An open-source MCP-native AI agent that chains exploits, not just lists them. · FrancescoStabile/numasec
20 views
Daily Writeups
⤷ Title: Phishing Basics
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:52:26 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #phishing_attacks #phishing
Medium
Phishing Basics
Explore phishing techniques and tools for penetration testing.
22 views
Daily Writeups
⤷ Title: RootMe Walkthrough: From Initial Access to Root Privilege Escalation
════════════════════════
𐀪 Author: Prabin Kumar Sethi
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:51:02 GMT
════════════════════════
⌗ Tags: #root_me #tryhackme_rootme #ctf #tryhackme
Medium
RootMe Walkthrough: From Initial Access to Root Privilege Escalation
In today’s cybersecurity landscape, understanding how attackers think is just as important as defending against them. In this walkthrough…
22 views
Daily Writeups
⤷ Title: JIT Heap Spray Explained: A Simple Guide for Beginners
════════════════════════
𐀪 Author: Ashen Bhagya
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:47:28 GMT
════════════════════════
⌗ Tags: #computer_security #javascript #programming_basic #cybersecurity #ethical_hacking
Medium
JIT Heap Spray Explained: A Simple Guide for Beginners
If you’re new to programming or cybersecurity, you might have heard the term JIT Heap Spray and thought it sounded confusing or scary…
27 views
Daily Writeups
⤷ Title: 7 Hidden Data Sources Subfinder Uses (That You Probably Ignore)
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:44:41 GMT
════════════════════════
⌗ Tags: #technology #coding #cybersecurity #programming #ethical_hacking
Medium
7 Hidden Data Sources Subfinder Uses (That You Probably Ignore)
The Real Magic Isn’t the Tool, It’s the Intelligence Behind It
37 views
Daily Writeups
⤷ Title: Collateral Damage: How a New Wave of Denuvo Piracy Could Kill Linux Gaming
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:58:35 +0000
════════════════════════
⌗ Tags: #Linux
Penetration Testing Tools
Collateral Damage: How a New Wave of Denuvo Piracy Could Kill Linux Gaming
Linux gaming, for the first time in an epoch, appears to have attained a state of relative maturity.
28 views
Daily Writeups
⤷ Title: The Web is a Minefield: How Hidden “Agent Traps” Can Hijack Autonomous AI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:56:18 +0000
════════════════════════
⌗ Tags: #Google #Adversarial Machine Learning #AI Agent Traps #AI security #Autonomous Agents #cybersecurity #Data Protection #Google DeepMind #Web Vulnerabilities
Penetration Testing Tools
The Web is a Minefield: How Hidden "Agent Traps" Can Hijack Autonomous AI
Researchers from Google DeepMind have elucidated how mundane web pages can be transmuted into instruments of assault against
21 views
Daily Writeups
⤷ Title: Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:33:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_27654 #CVE_2026_28753 #DNS PTR vulnerability #FreeNginx 1.29.7 #Mainline Branch #max_headers directive #nginx 1.29.8 #OpenSSL 4.0 #Server Security 2026 #WebDAV exploit
Penetration Testing Tools
Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
Within the nginx ecosystem, a dual release has emerged, impacting both the project’s primary development branch and its
21 views
Daily Writeups
⤷ Title: Hiding in Plain Sight: How Claude AI Exposed a 13-Year-Old RCE Flaw in Apache ActiveMQ
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:31:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Apache ActiveMQ #Claude AI #CVE_2026_34197 #Cybersecurity 2026 #Horizon3.ai #Infosec #Jolokia #Patch Alert #RCE #Vulnerability Research
Penetration Testing Tools
Hiding in Plain Sight: How Claude AI Exposed a 13-Year-Old RCE Flaw in Apache ActiveMQ
A vulnerability of over a decade’s standing has been unearthed within a preeminent messaging server, facilitating unauthorized command
20 views
Daily Writeups
⤷ Title: The Deflector Shield: Inside Project Glasswing’s $100M Race to Fix the Internet with AI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:27:58 +0000
════════════════════════
⌗ Tags: #Technology #AI Defense #Anthropic #AWS #Claude Mythos #Cybersecurity 2026 #google #Infosec #Microsoft #Nvidia #Project Glasswing #Vulnerability Research #zero_day
Penetration Testing Tools
The Deflector Shield: Inside Project Glasswing’s $100M Race to Fix the Internet with AI
The titans of the technology sector have moved to fortify their defenses in a nascent phase of cyber
19 views
Daily Writeups
⤷ Title: Shattering the Myth of the “Serene Harbor”: Trojans and Info-Stealers Now Dominate macOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:23:16 +0000
════════════════════════
⌗ Tags: #Malware #Apple Security #Cryptojacking #Cybersecurity 2026 #enterprise security #Information Stealer #Jamf 2026 #Mac malware #macOS Security #trojan #zero_day
Penetration Testing Tools
Shattering the Myth of the "Serene Harbor": Trojans and Info-Stealers Now Dominate macOS
Apple computers have long since ceased to be a “serene harbor,” a reality underscored by the latest findings
14 views