Daily Writeups
@Daily_Writeups
3.31K subscribers
1 photo
117K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.31K subscribers
Daily Writeups
⤷ Title: Mastering iOS Pentesting: Part 1(Updated): How to Jailbreak iPhone 7 / 7 Plus on new iOS 15.8.7
════════════════════════
𐀪 Author: Faris Faisal 0xFF
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:02:58 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #ios #iphone #mobile
Medium
Mastering iOS Pentesting: Part 1(Updated): How to Jailbreak iPhone 7 / 7 Plus on new iOS 15.8.7 using Dopamine 2.5b2 (April 2026)
Apple released iOS 15.8.7 on March 11, 2026. which patched the previous exploits. here is the new working method.
15 views
Daily Writeups
⤷ Title: Sine cura. I perché della sicurezza
════════════════════════
𐀪 Author: Arturo Di Corinto
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:36:01 GMT
════════════════════════
⌗ Tags: #privacy #internet #cybersecurity #hacking
Medium
Sine cura. I perché della sicurezza
Venerdì 10 aprile a partire dalle ore 17:30 presso la Sala “Figlia di Iorio” della Provincia di Pescara si terrà il convegno dal titolo…
10 views
Daily Writeups
⤷ Title: Pendidikan IT yang Lebih Siap Kerja Dibanding SMA Biasa
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:04:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #education
Medium
Pendidikan IT yang Lebih Siap Kerja Dibanding SMA Biasa
Dulu, menyelesaikan pendidikan jenjang SMA dianggap mencukupi.
9 views
Daily Writeups
⤷ Title: NFS: The Silent File Sharing Protocol That Can Expose Your Entire Network
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:59:00 GMT
════════════════════════
⌗ Tags: #network_enumeration #penetration_testing #cybersecurity #linux_security #fn
Medium
NFS: The Silent File Sharing Protocol That Can Expose Your Entire Network
Most people focus heavily on SMB during internal network assessments. But there’s another protocol — quieter, simpler, and often far more…
10 views
Daily Writeups
⤷ Title: Jailbreak-Type Characteristics in iOS: Behavior, Risks, and Security Insights
════════════════════════
𐀪 Author: Tandelpruthvi
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:47:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #ios_security #vapt #cybersecurity #jailbreaking
Medium
Jailbreak-Type Characteristics in iOS: Behavior, Risks, and Security Insights
Introduction
13 views
Daily Writeups
⤷ Title: Love Letter Locker — TryHackMe Writeup
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:47:17 GMT
════════════════════════
⌗ Tags: #tryhackme #idor_vulnerability #idor #tryhackme_walkthrough #love_letter_writeup
Medium
Love Letter Locker — TryHackMe Writeup
Introduction
16 views
Daily Writeups
⤷ Title: APT28 PRISMEX Analysis: Rapid Exploitation, Credential Harvesting, and Emerging Cyber Threat Trends
════════════════════════
𐀪 Author: Threatsys Technologies Pvt Ltd
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:46:26 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #ethical_hacking #cybersecurity_consultant #it_testing_services
Medium
APT28 PRISMEX Analysis: Rapid Exploitation, Credential Harvesting, and Emerging Cyber Threat Trends
Introduction
32 views
Daily Writeups
⤷ Title: The Agentic AI Attack Surface: Prompt Injection, Memory Poisoning, and How to Defend Against Them
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:33:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai #cyber_security_awareness #information_security #cybersecurity
Medium
The Agentic AI Attack Surface: Prompt Injection, Memory Poisoning, and How to Defend Against Them
Prompt injection attacks are reshaping agentic AI risk. Discover how they exploit reasoning layers and how to defend against evolving AI…
43 views
Daily Writeups
⤷ Title: Meet PentAGI: The Autonomous AI Swarm Redefining Modern Penetration Testing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:02:52 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI Agents #AI security #cybersecurity automation #DevSecOps #ethical hacking #network security #Penetration Testing #PentAGI #red teaming #Vulnerability Assessment
Penetration Testing Tools
Meet PentAGI: The Autonomous AI Swarm Redefining Modern Penetration Testing
PentAGI automates security audits with AI agents, sandboxed tools, and knowledge graphs. Secure your infrastructure with the future of autonomous red teaming.
35 views
Daily Writeups
⤷ Title: Mitel Patches Critical SQL Injection and Privilege Escalation in MiCollab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:21:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #AWV Component #cybersecurity #infosec #MiCollab #Mitel #Mitel Patch #privilege escalation #Remote Code Execution #sql injection #Unified Communications
Daily CyberSecurity
Mitel Patches Critical SQL Injection and Privilege Escalation in MiCollab
Mitel patches a critical 9.8 CVSS SQL injection in MiCollab. Learn how this unauthenticated flaw chains to full system takeover. Upgrade to v10.2 SP1 now!
20 views
Daily Writeups
⤷ Title: Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:44:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23869 #Denial of Service #dos #infosec #JavaScript Security #Node.js #React #React Server Components #RSC #web development #Webpack
Daily CyberSecurity
Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
React patches a 7.5 CVSS DoS vulnerability in Server Components (CVE-2026-23869). Stop CPU exhaustion attacks—update your 19.x dependencies now!
15 views
Daily Writeups
⤷ Title: Sandbox Escape: Critical Flatpak Flaw Grants Full Host Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34078 #cybersecurity #Flatpak #Flatpak Portal #infosec #Linux Security #rce #Sandbox Escape #Symlink Attack #systemd #Vulnerability
Daily CyberSecurity
Sandbox Escape: Critical Flatpak Flaw Grants Full Host Access
Critical 9.3 CVSS flaw (CVE-2026-34078) in Flatpak allows apps to escape sandboxes and access all host files. Secure your Linux system—update to v1.16.4 now!
12 views
Daily Writeups
⤷ Title: When a Simple Parameter Exposes All Users: A Real-World API Authorization Flaw
════════════════════════
𐀪 Author: Omkapri
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:21:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #qseap #application_security #api
Medium
When a Simple Parameter Exposes All Users: A Real-World API Authorization Flaw
Introduction
10 views
Daily Writeups
⤷ Title: Lab 11: Method-Based Access Control Bypass — How It Works, Real Bounties, and How to Test It
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:19:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3 #ethical_hacking #website #cybersecurity
Medium
Lab 11: Method-Based Access Control Bypass — How It Works, Real Bounties, and How to Test It
Some applications enforce access control only for specific HTTP methods (e.g. POST), while trusting or ignoring others (e.g. GET). An…
14 views
Daily Writeups
⤷ Title: [Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:46:44 GMT
════════════════════════
⌗ Tags: #rce #crontab #privilege_escalation #apache_tomcat #bug_bounty
Medium
[Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based Privilege Escalation
From exposed Tomcat manager access to root shell via crontab.
13 views
Daily Writeups
⤷ Title: Part 2/3: Finding Exposed phpinfo() Files — Reconnaissance Techniques
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:26:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bugbounty_writeup #phpinfo #bug_bounty #php
Medium
🎓 Part 2/3: Finding Exposed phpinfo() Files — Reconnaissance Techniques 🎓
Now that you understand what phpinfo() reveals, let’s explore how to find these exposed files across the internet and on target…
13 views
Daily Writeups
⤷ Title: HackTheBox — Garfield (Hard Windows): Walkthrough
════════════════════════
𐀪 Author: J0K3R
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:23:04 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #hackthebox #hacking #penetration_testing
Medium
HackTheBox — Garfield (Hard Windows): Walkthrough
Difficulty: Hard | OS: Windows | Points: 60 | Date: 2026–04–10
11 views
Daily Writeups
⤷ Title: How to do Active Directory Certificate Attacks (ESC1,2,3,4,6,7,8)
════════════════════════
𐀪 Author: Zoroya
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:14:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #active_directory #cybersecurity #hacking
Medium
How to do Active Directory Certificate Attacks (ESC1,2,3,4,6,7,8)
Hey Flocks, this write-up is going to be about Active Directory Certificate Service (ADCS) Attacks. So lets see what is ADCS.
11 views
Daily Writeups
⤷ Title: HackTheBox — Fries (Hard Windows): walkthrough
════════════════════════
𐀪 Author: J0K3R
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:05:50 GMT
════════════════════════
⌗ Tags: #penetration_testing #hackthebox #ctf #hacking #cybersecurity
Medium
HackTheBox — Fries (Hard Windows): walkthrough
HackTheBox — Fries (Hard Windows): walkthrough Difficulty: Hard | OS: Windows | Points: 60 | Date: 2026–04–08 https://labs.hackthebox.com/achievement/machine/3289443/808 Fries is a Hard-rated …
10 views
Daily Writeups
⤷ Title: Learn NMAP’S essential topics.
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:00:42 GMT
════════════════════════
⌗ Tags: #web_development #infosec #ethical_hacking #cybersecurity #information_security
Medium
Learn NMAP’S essential topics.
When preparing for the CySA+ exam, many canditdates make the mistake of focusing only on memorizing commands. But the exam is designed to…
9 views
Daily Writeups
⤷ Title: IDOR vulnerabilities explained: One of the most common web bugs
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:59:32 GMT
════════════════════════
⌗ Tags: #technology #web_development #infosec #cybersecurity #information_security
Medium
IDOR vulnerabilities explained: One of the most common web bugs
One of the Most common(and dangerous) Web Bugs
13 views