Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Love Letter Locker — TryHackMe Writeup
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:47:17 GMT
════════════════════════
⌗ Tags: #tryhackme #idor_vulnerability #idor #tryhackme_walkthrough #love_letter_writeup
Medium
Love Letter Locker — TryHackMe Writeup
Use your skills to access other users’ letters.
18 views
Daily Writeups
⤷ Title: APT28 PRISMEX Analysis: Rapid Exploitation, Credential Harvesting, and Emerging Cyber Threat Trends
════════════════════════
𐀪 Author: Threatsys Technologies Pvt Ltd
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:46:26 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #ethical_hacking #cybersecurity_consultant #it_testing_services
Medium
APT28 PRISMEX Analysis: Rapid Exploitation, Credential Harvesting, and Emerging Cyber Threat Trends
Introduction
34 views
Daily Writeups
⤷ Title: The Agentic AI Attack Surface: Prompt Injection, Memory Poisoning, and How to Defend Against Them
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 07:33:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai #cyber_security_awareness #information_security #cybersecurity
Medium
The Agentic AI Attack Surface: Prompt Injection, Memory Poisoning, and How to Defend Against Them
Prompt injection attacks are reshaping agentic AI risk. Discover how they exploit reasoning layers and how to defend against evolving AI…
44 views
Daily Writeups
⤷ Title: Meet PentAGI: The Autonomous AI Swarm Redefining Modern Penetration Testing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:02:52 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI Agents #AI security #cybersecurity automation #DevSecOps #ethical hacking #network security #Penetration Testing #PentAGI #red teaming #Vulnerability Assessment
Penetration Testing Tools
Meet PentAGI: The Autonomous AI Swarm Redefining Modern Penetration Testing
PentAGI automates security audits with AI agents, sandboxed tools, and knowledge graphs. Secure your infrastructure with the future of autonomous red teaming.
39 views
Daily Writeups
⤷ Title: Mitel Patches Critical SQL Injection and Privilege Escalation in MiCollab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:21:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #AWV Component #cybersecurity #infosec #MiCollab #Mitel #Mitel Patch #privilege escalation #Remote Code Execution #sql injection #Unified Communications
Daily CyberSecurity
Mitel Patches Critical SQL Injection and Privilege Escalation in MiCollab
Mitel patches a critical 9.8 CVSS SQL injection in MiCollab. Learn how this unauthenticated flaw chains to full system takeover. Upgrade to v10.2 SP1 now!
25 views
Daily Writeups
⤷ Title: Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:44:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23869 #Denial of Service #dos #infosec #JavaScript Security #Node.js #React #React Server Components #RSC #web development #Webpack
Daily CyberSecurity
Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
React patches a 7.5 CVSS DoS vulnerability in Server Components (CVE-2026-23869). Stop CPU exhaustion attacks—update your 19.x dependencies now!
17 views
Daily Writeups
⤷ Title: Sandbox Escape: Critical Flatpak Flaw Grants Full Host Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34078 #cybersecurity #Flatpak #Flatpak Portal #infosec #Linux Security #rce #Sandbox Escape #Symlink Attack #systemd #Vulnerability
Daily CyberSecurity
Sandbox Escape: Critical Flatpak Flaw Grants Full Host Access
Critical 9.3 CVSS flaw (CVE-2026-34078) in Flatpak allows apps to escape sandboxes and access all host files. Secure your Linux system—update to v1.16.4 now!
13 views
Daily Writeups
⤷ Title: When a Simple Parameter Exposes All Users: A Real-World API Authorization Flaw
════════════════════════
𐀪 Author: Omkapri
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:21:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #qseap #application_security #api
Medium
When a Simple Parameter Exposes All Users: A Real-World API Authorization Flaw
Introduction
11 views
Daily Writeups
⤷ Title: Lab 11: Method-Based Access Control Bypass — How It Works, Real Bounties, and How to Test It
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:19:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3 #ethical_hacking #website #cybersecurity
Medium
Lab 11: Method-Based Access Control Bypass — How It Works, Real Bounties, and How to Test It
Some applications enforce access control only for specific HTTP methods (e.g. POST), while trusting or ignoring others (e.g. GET). An…
14 views
Daily Writeups
⤷ Title: [Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:46:44 GMT
════════════════════════
⌗ Tags: #rce #crontab #privilege_escalation #apache_tomcat #bug_bounty
Medium
[Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based Privilege Escalation
From exposed Tomcat manager access to root shell via crontab.
13 views
Daily Writeups
⤷ Title: Part 2/3: Finding Exposed phpinfo() Files — Reconnaissance Techniques
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:26:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bugbounty_writeup #phpinfo #bug_bounty #php
Medium
🎓 Part 2/3: Finding Exposed phpinfo() Files — Reconnaissance Techniques 🎓
Now that you understand what phpinfo() reveals, let’s explore how to find these exposed files across the internet and on target…
14 views
Daily Writeups
⤷ Title: HackTheBox — Garfield (Hard Windows): Walkthrough
════════════════════════
𐀪 Author: J0K3R
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:23:04 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #hackthebox #hacking #penetration_testing
Medium
HackTheBox — Garfield (Hard Windows): Walkthrough
Difficulty: Hard | OS: Windows | Points: 60 | Date: 2026–04–10
13 views
Daily Writeups
⤷ Title: How to do Active Directory Certificate Attacks (ESC1,2,3,4,6,7,8)
════════════════════════
𐀪 Author: Zoroya
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:14:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #active_directory #cybersecurity #hacking
Medium
How to do Active Directory Certificate Attacks (ESC1,2,3,4,6,7,8)
Hey Flocks, this write-up is going to be about Active Directory Certificate Service (ADCS) Attacks. So lets see what is ADCS.
13 views
Daily Writeups
⤷ Title: HackTheBox — Fries (Hard Windows): walkthrough
════════════════════════
𐀪 Author: J0K3R
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:05:50 GMT
════════════════════════
⌗ Tags: #penetration_testing #hackthebox #ctf #hacking #cybersecurity
Medium
HackTheBox — Fries (Hard Windows): walkthrough
HackTheBox — Fries (Hard Windows): walkthrough Difficulty: Hard | OS: Windows | Points: 60 | Date: 2026–04–08 https://labs.hackthebox.com/achievement/machine/3289443/808 Fries is a Hard-rated …
11 views
Daily Writeups
⤷ Title: Learn NMAP’S essential topics.
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:00:42 GMT
════════════════════════
⌗ Tags: #web_development #infosec #ethical_hacking #cybersecurity #information_security
Medium
Learn NMAP’S essential topics.
When preparing for the CySA+ exam, many canditdates make the mistake of focusing only on memorizing commands. But the exam is designed to…
10 views
Daily Writeups
⤷ Title: IDOR vulnerabilities explained: One of the most common web bugs
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:59:32 GMT
════════════════════════
⌗ Tags: #technology #web_development #infosec #cybersecurity #information_security
Medium
IDOR vulnerabilities explained: One of the most common web bugs
One of the Most common(and dangerous) Web Bugs
14 views
Daily Writeups
⤷ Title: Apple 26.4 Security Update: What to Verify After Patch Day
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:28:53 GMT
════════════════════════
⌗ Tags: #penetration_testing #apple_security #cybersecurity #macos_security #web_security
Medium
Apple 26.4 Security Update: What to Verify After Patch Day
Apple 26.4 Release Week: What Security Teams Must Verify After Patch Day
12 views
Daily Writeups
⤷ Title: TryHackMe Mr. Robot CTF
════════════════════════
𐀪 Author: Faruk Özlük
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:38:23 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme
Medium
TryHackMe Mr. Robot CTF
Sürece, hedef sistem üzerindeki açık servisleri ve zayıf noktaları tespit etmek için Nmap taramasıyla başlıyoruz.
16 views
Daily Writeups
⤷ Title: TryHackme Skynet Write-Up
════════════════════════
𐀪 Author: Nusret Onur
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 10:28:31 GMT
════════════════════════
⌗ Tags: #tryhackme_skynet #tryhackme #tryhackme_writeup #skynet
Medium
TryHackme Skynet Write-Up
In this write-up, I wanted to share the solution to the Skynet room on the TryHackMe platform, which I greatly enjoyed solving. This…
28 views
Daily Writeups
⤷ Title: TryHackme/W1seGuy
════════════════════════
𐀪 Author: hlothbork018
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:52:55 GMT
════════════════════════
⌗ Tags: #ctf #w1seguy #encoder_decoder #tryhackme
Medium
TryHackme/W1seGuy
Burada bizim kodumuzun 5 Digit-dən ibarət olduğunu görə bilərik “k-5”.
26 views
Daily Writeups
⤷ Title: Deathnote | Vulnhub walkthrough
════════════════════════
𐀪 Author: Vin13
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:23:34 GMT
════════════════════════
⌗ Tags: #kali_linux #vulnhub_walkthrough #death_note #vulnhub #ctf
Medium
Deathnote | Vulnhub walkthrough
Step-by-Step Guide for CTF
36 views