Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: AI Web vs API Security: What Most Companies Get Wrong (And Why It Matters More Than Ever)
════════════════════════
𐀪 Author: Novashield
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 21:27:59 GMT
════════════════════════
⌗ Tags: #api #api_security #cybersecurity #cybersecurity_service #web_security
Medium
AI Web vs API Security: What Most Companies Get Wrong (And Why It Matters More Than Ever)
20 views
Daily Writeups
⤷ Title: The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:02:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Attack #Black Lotus Labs #cyber_espionage #cybersecurity #DNS Redirection #Forest Blizzard #FrostArmada #MikroTik #OAuth Token Theft #router exploitation #TP_Link
Daily CyberSecurity
The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
Russian-linked Forest Blizzard's FrostArmada campaign hijacked 18,000+ routers to steal OAuth tokens via DNS redirection. Learn how they stayed invisible.
20 views
Daily Writeups
⤷ Title: My Medium Partner Program Suddenly Turned “Inactive” And I Still Don’t Know Why
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:09:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #medium_partner_program #medium #writing
Medium
My Medium Partner Program Suddenly Turned “Inactive” And I Still Don’t Know Why
My Medium Partner Program Turned Inactive — Even After Following All Rules
14 views
Daily Writeups
⤷ Title: How I Found a CVSS 8.6 Token Exposure in a U.S. Financial Firm’s Production CMS
════════════════════════
𐀪 Author: mv999exe
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:07:21 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #penetration_testing
Medium
How I Found a CVSS 8.6 Token Exposure in a U.S. Financial Firm’s Production CMS
A walkthrough of discovering, exploiting, and responsibly disclosing a critical Information Disclosure vulnerability via HackerOne.
14 views
Daily Writeups
⤷ Title: I Found a Broken Login System in a Fintech App — Here’s How I Did It
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:01:56 GMT
════════════════════════
⌗ Tags: #jwt #cybersecurity #penetration_testing #bug_bounty #authentication
Medium
I Found a Broken Login System in a Fintech App — Here’s How I Did It
A real bug hunt story with JWT tokens, Burp Suite, and a fintech website that trusted too much
13 views
Daily Writeups
⤷ Title: Vibe Hacking: How AI Is Helping Hackers
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:02:07 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #tech #hacking #ai
Medium
Vibe Hacking: How AI Is Helping Hackers
The Hoodie Is Gone. Now All You Need Is a Chat Window and Good Vibes
16 views
Daily Writeups
⤷ Title: The Illusion of Security: End to end compromise of a Production Banking App
════════════════════════
𐀪 Author: Mr_Curiosity
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:48:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #cryptography #hacking #banking_security
Medium
The Illusion of Security: End to end compromise of a Production Banking App
Attack Flow Diagram
8 views
Daily Writeups
⤷ Title: Introducción a la API de Windows Para el desarrollo de malware, parte 3.
════════════════════════
𐀪 Author: Dalton
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:28:04 GMT
════════════════════════
⌗ Tags: #hacker #pentesting #malware #malware_development #hacking
Medium
Introducción a la API de Windows Para el desarrollo de malware, parte 3.
De memoria remota a ejecución: Process Injection en Windows
10 views
Daily Writeups
⤷ Title: Investigating Windows Event Logs: A Practical Digital Forensics Walkthrough
════════════════════════
𐀪 Author: Ritujaa Kelaskar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:33:17 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #infosec #digital_forensics #windows_forensics
Medium
Investigating Windows Event Logs: A Practical Digital Forensics Walkthrough
Introduction
14 views
Daily Writeups
⤷ Title: Metasploit: The Tool That Changed Penetration Testing Standards
════════════════════════
𐀪 Author: Aryan Sharma
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #penetration_testing #metasploit_framework #cybersecurity
Medium
Metasploit: The Tool That Changed Penetration Testing Standards
I’m a cybersecurity student, and when I first heard about Metasploit, in my college first year, it seemed very fresh and something exciting…
16 views
Daily Writeups
⤷ Title: Dance-Samba Writeup Español
════════════════════════
𐀪 Author: Us0lfr
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 23:12:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #dockerlabs #ctf_writeup #pentesting #cybersecurity
Medium
Dance-Samba Writeup Español
La máquina Dance-Samba se encuentra en la plataforma de DockerLabs la plataforma fue creada por “El Pingüino de Mario” y la máquina fue…
18 views
Daily Writeups
⤷ Title: Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 02:12:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Panel Security #CMS Security #CVE_2026_25776 #CVE_2026_33088 #cybersecurity #infosec #Movable Type #Perl RCE #rce #Six Apart #sql injection
Daily CyberSecurity
Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
Movable Type patches a critical 9.8 CVSS RCE vulnerability in its Listing Framework. Secure your CMS against Perl code execution and SQLi—update today!
22 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 6 – April 12, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:41:10 +0000
════════════════════════
⌗ Tags: #Weekly Recap #AI security #CISA KEV #cybersecurity #Flowise #Fortinet #infosec #Ivanti #Marimo #patch management #rce #Vulnerability Digest #zero_day
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 6 – April 12, 2026)
Weekly vulnerability digest (April 6-12, 2026): 1,615 new flaws, CISA KEV alerts for Ivanti and Fortinet, and critical RCE in AI tools like Flowise.
16 views
Daily Writeups
⤷ Title: The Stealthy Evolution of the DesckVB RAT Infection Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:34:25 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection #C2 #cybersecurity #DesckVB RAT #Fileless Malware #In_Memory Attack #JavaScript Trojan #Lat61 #malware #powershell #Process Hijacking
Daily CyberSecurity
The Stealthy Evolution of the DesckVB RAT Infection Chain
Lat61 Team uncovers DesckVB RAT, a stealthy 2026 Trojan using in-memory .NET loaders & JS obfuscation to hijack systems and evade AV. Learn how it works.
8 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views
Daily Writeups
⤷ Title: Authentication Bypass — How Attackers Become Anyone
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 02:40:54 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #bug_bounty #hacking #security
Medium
🔐 Authentication Bypass — How Attackers Become Anyone
✍️ Introduction
10 views
Daily Writeups
⤷ Title: My Bug Bounty Journey #10: Start Your Bug Bounty Journey Today
════════════════════════
𐀪 Author: awchjimmy
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 02:06:25 GMT
════════════════════════
⌗ Tags: #web_development #bug_bounty #cybersecurity
Medium
My Bug Bounty Journey #10: Start Your Bug Bounty Journey Today
The End
6 views
Daily Writeups
⤷ Title: Cool Open Redirect With Bypass
════════════════════════
𐀪 Author: pm
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:50:35 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hacking #bug_bounty #hackerone
Medium
Cool Open Redirect With Bypass
Hey Guys,
6 views
Daily Writeups
⤷ Title: Blind SQL injection with conditional errors
════════════════════════
𐀪 Author: Mohamed Ahmed
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:28:31 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #amazon_web_services #portswigger #bug_bounty
Medium
Blind SQL injection with conditional errors
Lab Description (Enhanced)
12 views
Daily Writeups
⤷ Title: ⚙️ 09. — Insecure Direct Object References (IDOR)
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:52:50 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #web_security #cybersecurity
Medium
⚙️ 09. — Insecure Direct Object References (IDOR)
⚙️ 09. — Insecure Direct Object References (IDOR) Difficulty: 🟢 Apprentice Goal: 💬 Go to Live chat — send any message — click “View transcript” — observe the download URL …
8 views
Daily Writeups
⤷ Title: ⚙️ 08. — User ID controlled by request parameter with password disclosure
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 00:50:20 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #cybersecurity #portswigger
Medium
⚙️ 08. — User ID controlled by request parameter with password disclosure
⚙️ 08. — User ID controlled by request parameter with password disclosure Difficulty: 🟢 Apprentice Goal: 🔍 Log in as wiener / peter — go to My account — observe the URL is ?id=wiener …
10 views