Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: DOM XSS in jQuery anchor href attribute sink using location.search source(Simple + Practical Guide)
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:12:40 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #portswigger
Medium
DOM XSS in jQuery anchor href attribute sink using location.search source(Simple + Practical Guide)
I solved a DOM XSS lab where user input is used to modify a link (href) using jQuery.
At first it was confusing, but once I understood the…
9 views
Daily Writeups
⤷ Title: TryHackMe Built an AI Pentester Using Your Behavior Data. Here’s the Full Story.
════════════════════════
𐀪 Author: Dfaults
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:34:03 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #privacy #technology #cybersecurity
Medium
TryHackMe Built an AI Pentester Using Your Behavior Data. Here’s the Full Story.
NoScope, consent, and what this controversy reveals about every platform you’re trusting with your learning data.
8 views
Daily Writeups
⤷ Title: Understanding CWE-347: Improper Verification of Cryptographic Signature
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #cwe #cybersecurity #infosec #software_development #hacking
Medium
Understanding CWE-347: Improper Verification of Cryptographic Signature
Cryptographic signatures are used to verify that data comes from a trusted source and has not been tampered with. When an application…
8 views
Daily Writeups
⤷ Title: Argus: Building a Linux Kernel Rootkit Detection Module
════════════════════════
𐀪 Author: Ananthanr Off
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:33:43 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #rootkit #systems_programming #linux_kernel
Medium
Argus: Building a Linux Kernel Rootkit Detection Module
Argus is a Linux kernel rootkit detector using cross-view analysis to uncover hidden system activity.
13 views
Daily Writeups
⤷ Title: The GRC Technician and the Death of the Check-Box: A Manifesto for Australian Cyber…
════════════════════════
𐀪 Author: John Rouffas
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:57:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #infosec #risk_management #cyberpath
Medium
The GRC Technician and the Death of the Check-Box: A Manifesto for Australian Cyber Professionalisation
The Australian national consultation on cybersecurity workforce professionalisation has spent a lot of time on “machinery” — registration…
11 views
Daily Writeups
⤷ Title: Android Content Provider Security: Exploiting File Providers (Pentester Deep Dive — Part 4)
════════════════════════
𐀪 Author: Mustafa Mohamed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:13:53 GMT
════════════════════════
⌗ Tags: #fileprovider #penetration_testing #mobile_pentesting #mobile_app_security #android_app_security
Medium
Android Content Provider Security: Exploiting File Providers (Pentester Deep Dive — Part 4)
Introduction
17 views
Daily Writeups
⤷ Title: ContainMe TryHackMe Walkthrough | by Yoel Yosief
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:11:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_exploitation #tryhackme_walkthrough #lfi_vulnerability #ctf
Medium
ContainMe TryHackMe Walkthrough | by Yoel Yosief
Hack into me and look for the hidden flag. Look beyond the horizon.
5 views
Daily Writeups
⤷ Title: Mystic C2 Server — 101
════════════════════════
𐀪 Author: Miraç Küçük
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:40:48 GMT
════════════════════════
⌗ Tags: #penetration_testing #malware #c2_server #ethical_hacking #red_team
Medium
Introduction to the C2 Server — Mythic C2 Server — 101
Welcome to the first article of the Mythic C2 Server series.
7 views
Daily Writeups
⤷ Title: Mystic C2 Server - 101 (TR)
════════════════════════
𐀪 Author: Miraç Küçük
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:12:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #red_team #penetration_testing #c2_server #malware
8 views
Daily Writeups
⤷ Title: Elastic: Using Elastic Defend Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:17:28 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #blue_team #cybersecurity
Medium
Elastic: Using Elastic Defend Walkthrough Notes | TryHackMe
Elastic Defend walkthrough covering logs alerts and threat detection basics
12 views
Daily Writeups
⤷ Title: Pickle Rick | TryHackMe CTF Writeup
════════════════════════
𐀪 Author: Debmalya Mondal⚡
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:54:09 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf #ctf_writeup #tryhackme_writeup #tryhackme
Medium
Pickle Rick | TryHackMe CTF Writeup
A Rick and Morty CTF. Help turn Rick back into a human!
12 views
Daily Writeups
⤷ Title: Hip Flask Tryhackme Room Writeup
════════════════════════
𐀪 Author: MainEkHacker
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:16:01 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #tryhackme #ethical_hacking #tryhackme_writeup
16 views
Daily Writeups
⤷ Title: Visible Error-Based SQL Injection: Leaking Data Through PostgreSQL Errors
════════════════════════
𐀪 Author: Mohamed Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:50:21 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #cybersecurity #web_security #sql_injection
20 views
Daily Writeups
⤷ Title: Certified Linux training and internship program for beginners
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 11:21:21 GMT
════════════════════════
⌗ Tags: #education #ethical_hacking #cybersecurity_training #linux #cybersecurity
27 views
Daily Writeups
⤷ Title: Your API Is 'Rate Limited' — But Can Still Burst 2x at Window Boundaries
════════════════════════
𐀪 Author: Sayansh Chopra
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:17:49 GMT
════════════════════════
⌗ Tags: #api_security #software_engineering #backend_development #nodejs #system_design_concepts
Medium
Your Rate Limiter Has a Blind Spot
Your Rate Limiter Has a Blind Spot I thought rate limiting was a solved problem. Add express-rate-limit, set a window, set a max, move on. Then I tested it under realistic conditions and found a gap …
34 views
Daily Writeups
⤷ Title: ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 18:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:50:29 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #AI #Anthropic #Claude #Claude AI #Claude Code #Cybersecurity #LayerX #Vulnerability
Hackread
Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
Claude Code can be manipulated via CLAUDE.md to bypass safeguards and execute SQL injection attacks, enabling credential theft, says LayerX.
24 views
Daily Writeups
⤷ Title: Cloud Engineering at Risk: AWS Patches Critical Privilege Escalation and RCE Flaws in RES
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:45:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Web Services #AWS RES #Cloud Security #Command Injection #CVE_2026_5707 #CVE_2026_5708 #CVE_2026_5709 #EC2 Security #infosec #privilege escalation #Research Computing #root access
Daily CyberSecurity
Cloud Engineering at Risk: AWS Patches Critical Privilege Escalation and RCE Flaws in RES
AWS patches critical RES flaws (CVE-2026-5707/8/9) allowing root access and instance profile hijacking. Protect your cloud lab—update to v2026.03 now.
15 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Flaws in goshs Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:04:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35392 #CVE_2026_35393 #cybersecurity #File Security #Golang #goshs #infosec #Path Traversal #rce #SimpleHTTPServer #Vulnerability Research
Daily CyberSecurity
Critical 9.8 CVSS Flaws in goshs Exposed
Critical 9.8 flaws in goshs v2.0.0-beta.2 allow unauthenticated attackers to write or delete any file on your system. Update to v2.0.0-beta.3 immediately!
13 views
Daily Writeups
⤷ Title: The “Open Door” Vulnerability: Unchanged Default Passwords Put Juniper vLWC at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:56:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_33784 #CVSS 9.8 #cybersecurity #Default Password #infosec #JSI #Juniper Networks #network_security #Support Insights #Virtual Collector #vLWC
Daily CyberSecurity
The "Open Door" Vulnerability: Unchanged Default Passwords Put Juniper vLWC at Risk
Juniper warns of a critical 9.8 CVSS flaw in JSI vLWC. A default password allows unauthenticated attackers to take full device control. Update to 3.0.94 now!
12 views
Daily Writeups
⤷ Title: 100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:05:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #9.8 CVSS #CVE_2026_3296 #cybersecurity #Everest Forms #infosec #PHP Object Injection #plugin security #rce #WordPress Patch #wordpress security
Daily CyberSecurity
100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin
Everest Forms patches a critical 9.8 CVSS PHP Object Injection vulnerability affecting 100,000+ sites. Update to v3.4.4 now to prevent full site takeover!
11 views