Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Google’s Hackers Investigated 500,000 Hours of Breaches. Here’s What They Found.
════════════════════════
𐀪 Author: Muhammad Ali Khawar Butt
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 22:57:55 GMT
════════════════════════
⌗ Tags: #google #exploit #ai #hacking
Medium
Google’s Hackers Investigated 500,000 Hours of Breaches. Here’s What They Found.
Hackers are handing over access to ransomware groups in 22 seconds in 2025 and onwards, instead of 8 hours before. This was showcased in…
17 views
Daily Writeups
⤷ Title: CTF Pwn104 @ TryHackMe
════════════════════════
𐀪 Author: Rafael David
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 22:28:55 GMT
════════════════════════
⌗ Tags: #exploração_de_binários #ctf #hacking #binary_exploitation #ctf_writeup
Medium
CTF Pwn104 @ TryHackMe
Esse artigo é um write-up do desafio Pwn104 do TryHackMe. Esse desafio faz parte da sala Pwn101 de exploração de binários. O link da sala é…
15 views
Daily Writeups
⤷ Title: Reverse Engineering on CyberTalents: Solving All Easy Challenges Part 2
════════════════════════
𐀪 Author: Isv0x1
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 21:54:31 GMT
════════════════════════
⌗ Tags: #software_development #reverse_engineering #hacking #cybersecurity
Medium
Reverse Engineering on CyberTalents: Solving All Easy Challenges Part 2
🚩 Challenge 3: “Pure Luck” Reverse Engineering
10 views
Daily Writeups
⤷ Title: How Hackers Steal Your Passwords
════════════════════════
𐀪 Author: SNEH.V.RANPARA
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 21:31:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #privacy #online_safety #hacking
Medium
How Hackers Steal Your Passwords
Let me start with something honest.
9 views
Daily Writeups
⤷ Title: SOC227 — Microsoft SharePoint Server Elevation of Privilege | CVE-2023–29357 | LetsDefend Writeup
════════════════════════
𐀪 Author: Rai Pereira
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 21:32:44 GMT
════════════════════════
⌗ Tags: #infosec #writeup #lets_defend #cybersecurity #blue_team
Medium
SOC227 — Microsoft SharePoint Server Elevation of Privilege | CVE-2023–29357 | LetsDefend Writeup
Understanding the Alert
13 views
Daily Writeups
⤷ Title: DNS Zone Transfers: The Silent Information Leak in DNS by Mert Baykal
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 22:04:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #dns #web_security
Medium
DNS Zone Transfers: The Silent Information Leak in DNS by Mert Baykal
Introduction
17 views
Daily Writeups
⤷ Title: AI Web vs API Security: What Most Companies Get Wrong (And Why It Matters More Than Ever)
════════════════════════
𐀪 Author: Novashield
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 21:27:59 GMT
════════════════════════
⌗ Tags: #api #api_security #cybersecurity #cybersecurity_service #web_security
Medium
AI Web vs API Security: What Most Companies Get Wrong (And Why It Matters More Than Ever)
20 views
Daily Writeups
⤷ Title: The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:02:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Attack #Black Lotus Labs #cyber_espionage #cybersecurity #DNS Redirection #Forest Blizzard #FrostArmada #MikroTik #OAuth Token Theft #router exploitation #TP_Link
Daily CyberSecurity
The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
Russian-linked Forest Blizzard's FrostArmada campaign hijacked 18,000+ routers to steal OAuth tokens via DNS redirection. Learn how they stayed invisible.
20 views
Daily Writeups
⤷ Title: My Medium Partner Program Suddenly Turned “Inactive” And I Still Don’t Know Why
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:09:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #medium_partner_program #medium #writing
Medium
My Medium Partner Program Suddenly Turned “Inactive” And I Still Don’t Know Why
My Medium Partner Program Turned Inactive — Even After Following All Rules
14 views
Daily Writeups
⤷ Title: How I Found a CVSS 8.6 Token Exposure in a U.S. Financial Firm’s Production CMS
════════════════════════
𐀪 Author: mv999exe
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:07:21 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #penetration_testing
Medium
How I Found a CVSS 8.6 Token Exposure in a U.S. Financial Firm’s Production CMS
A walkthrough of discovering, exploiting, and responsibly disclosing a critical Information Disclosure vulnerability via HackerOne.
14 views
Daily Writeups
⤷ Title: I Found a Broken Login System in a Fintech App — Here’s How I Did It
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:01:56 GMT
════════════════════════
⌗ Tags: #jwt #cybersecurity #penetration_testing #bug_bounty #authentication
Medium
I Found a Broken Login System in a Fintech App — Here’s How I Did It
A real bug hunt story with JWT tokens, Burp Suite, and a fintech website that trusted too much
13 views
Daily Writeups
⤷ Title: Vibe Hacking: How AI Is Helping Hackers
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:02:07 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #tech #hacking #ai
Medium
Vibe Hacking: How AI Is Helping Hackers
The Hoodie Is Gone. Now All You Need Is a Chat Window and Good Vibes
16 views
Daily Writeups
⤷ Title: The Illusion of Security: End to end compromise of a Production Banking App
════════════════════════
𐀪 Author: Mr_Curiosity
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:48:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #cryptography #hacking #banking_security
Medium
The Illusion of Security: End to end compromise of a Production Banking App
Attack Flow Diagram
8 views
Daily Writeups
⤷ Title: Introducción a la API de Windows Para el desarrollo de malware, parte 3.
════════════════════════
𐀪 Author: Dalton
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:28:04 GMT
════════════════════════
⌗ Tags: #hacker #pentesting #malware #malware_development #hacking
Medium
Introducción a la API de Windows Para el desarrollo de malware, parte 3.
De memoria remota a ejecución: Process Injection en Windows
10 views
Daily Writeups
⤷ Title: Investigating Windows Event Logs: A Practical Digital Forensics Walkthrough
════════════════════════
𐀪 Author: Ritujaa Kelaskar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:33:17 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #infosec #digital_forensics #windows_forensics
Medium
Investigating Windows Event Logs: A Practical Digital Forensics Walkthrough
Introduction
14 views
Daily Writeups
⤷ Title: Metasploit: The Tool That Changed Penetration Testing Standards
════════════════════════
𐀪 Author: Aryan Sharma
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #penetration_testing #metasploit_framework #cybersecurity
Medium
Metasploit: The Tool That Changed Penetration Testing Standards
I’m a cybersecurity student, and when I first heard about Metasploit, in my college first year, it seemed very fresh and something exciting…
16 views
Daily Writeups
⤷ Title: Dance-Samba Writeup Español
════════════════════════
𐀪 Author: Us0lfr
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:12:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #dockerlabs #ctf_writeup #pentesting #cybersecurity
Medium
Dance-Samba Writeup Español
La máquina Dance-Samba se encuentra en la plataforma de DockerLabs la plataforma fue creada por “El Pingüino de Mario” y la máquina fue…
18 views
Daily Writeups
⤷ Title: Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 02:12:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Panel Security #CMS Security #CVE_2026_25776 #CVE_2026_33088 #cybersecurity #infosec #Movable Type #Perl RCE #rce #Six Apart #sql injection
Daily CyberSecurity
Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
Movable Type patches a critical 9.8 CVSS RCE vulnerability in its Listing Framework. Secure your CMS against Perl code execution and SQLi—update today!
22 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 6 – April 12, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:41:10 +0000
════════════════════════
⌗ Tags: #Weekly Recap #AI security #CISA KEV #cybersecurity #Flowise #Fortinet #infosec #Ivanti #Marimo #patch management #rce #Vulnerability Digest #zero_day
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 6 – April 12, 2026)
Weekly vulnerability digest (April 6-12, 2026): 1,615 new flaws, CISA KEV alerts for Ivanti and Fortinet, and critical RCE in AI tools like Flowise.
16 views
Daily Writeups
⤷ Title: The Stealthy Evolution of the DesckVB RAT Infection Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:34:25 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection #C2 #cybersecurity #DesckVB RAT #Fileless Malware #In_Memory Attack #JavaScript Trojan #Lat61 #malware #powershell #Process Hijacking
Daily CyberSecurity
The Stealthy Evolution of the DesckVB RAT Infection Chain
Lat61 Team uncovers DesckVB RAT, a stealthy 2026 Trojan using in-memory .NET loaders & JS obfuscation to hijack systems and evade AV. Learn how it works.
8 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views