Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Critical 9.1 Flaws Hit Fortinet FortiSandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:07:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_39808 #CVE_2026_39813 #cybersecurity #Fortinet #FortiSandbox #infosec #os command injection #Patch Alert #Path Traversal #rce
Daily CyberSecurity
Critical 9.1 Flaws Hit Fortinet FortiSandbox
Fortinet issues a critical 9.1 CVSS alert for FortiSandbox. Unauthenticated auth bypass and command injection risks. Patch to 5.0.6 or 4.4.9 immediately.
19 views
Daily Writeups
⤷ Title: Injection Attacks — From User Input to Full System Control
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 04:47:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #linux #security #cybersecurity
Medium
💉 Injection Attacks — From User Input to Full System Control
✍️ Introduction
16 views
Daily Writeups
⤷ Title: ⚙️ 13. — Referer — Based Access Control
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:03:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #portswigger #bug_bounty
Medium
⚙️ 13. — Referer — Based Access Control
⚙️ 13. — Referer — Based Access Control Difficulty: 🟡 Practitioner Goal: 🔍 Log in as administrator:admin → promote carlos → capture GET /admin-roles?username=carlos&action=upgrade …
18 views
Daily Writeups
⤷ Title: ⚙️ 12. — Multi-step process with no access control on one step
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:03:11 GMT
════════════════════════
⌗ Tags: #portswigger #web_security #bug_bounty #cybersecurity
Medium
⚙️ 12. — Multi-step process with no access control on one step
⚙️ 12. — Multi-step process with no access control on one step Difficulty: 🟡 Practitioner Goal: 🔍 Log in as administrator:admin → browse to /admin → promote carlos — observe the …
30 views
Daily Writeups
⤷ Title: AI Models & Data (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:35:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #artificial_intelligence #hacking #ai_security
Medium
AI Models & Data (THM) Tryhackme Walkthrough
Description : Explore how data is fundamental to AI security, and the models which power it.
42 views
Daily Writeups
⤷ Title: OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 10:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: The “Graphalgo” Evolution: How North Korea Built a Fake Florida LLC to Hack Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:24:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain security #github #Graphalgo #infosec #Job Scam #malware #North Korea #phishing #rat #ReversingLabs #social engineering #Typo_squatting
Daily CyberSecurity
The "Graphalgo" Evolution: How North Korea Built a Fake Florida LLC to Hack Developers
North Korea’s "graphalgo" campaign uses fake job interviews and real Florida LLCs to infect developers. Learn how to spot this sophisticated state-sponsored trap.
28 views
Daily Writeups
⤷ Title: Automated Pen Testing Writing Custom Burp Extensions with Python and Jython
════════════════════════
𐀪 Author: Shreyash Mall
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 19:50:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #automation #python #penetration_testing #bug_bounty
Medium
Automated Pen Testing: Writing Custom Burp Extensions with Python and Jython
If you do any serious bug bounty hunting or penetration testing, you already know the pain. You end up clicking through the exact same…
20 views
Daily Writeups
⤷ Title: Beyond Pentesting: Why Your 2026 Cybersecurity Training Must Include AI-Threat Hunting
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:25:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #ai #hacking
Medium
Beyond Pentesting: Why Your 2026 Cybersecurity Training Must Include AI-Threat Hunting
The cybersecurity landscape has reached a tipping point. As we navigate through 2026, the traditional “cat and mouse” game between hackers…
24 views
Daily Writeups
⤷ Title: The CPUID/CPU-Z Hack Explained
════════════════════════
𐀪 Author: Solvenite
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:25:19 GMT
════════════════════════
⌗ Tags: #cyber_security_incident #security #cybersecurity #hacking #cpu
Medium
The CPUID/CPU-Z Hack Explained
Security Incident · April 9–10, 2026 · cpuid.com · STX RAT
17 views
Daily Writeups
⤷ Title: Can AI Fully Automate Pentesting?
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:58:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #pentesting #artificial_intelligence #ethical_hacking
Medium
Can AI Fully Automate Pentesting?
Artificial intelligence(AI) is transforming nearly every industry, and cybersecurity is no exception. Over the last few years, AI-powered…
18 views
Daily Writeups
⤷ Title: Survival in the 20-Hour Window: Why the Mythos Storm Makes Traditional Scanning Insufficient in…
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:52:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #ciso #infosec #mythos2026 #appsec
Medium
Survival in the 20-Hour Window: Why the Mythos Storm Makes Traditional Scanning Insufficient in Isolation
By Eldor Zufarov, Founder of Auditor Core
19 views
Daily Writeups
⤷ Title: Man-in-the-Middle: Intercepting Trust in Transit
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 05:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #mitm #web_security #infosec
Medium
Man-in-the-Middle: Intercepting Trust in Transit
Context
16 views
Daily Writeups
⤷ Title: The Hidden Playbook: 15 “Secrets” Every Penetration Tester Learns the Hard Way
════════════════════════
𐀪 Author: pavani
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:41:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
Medium
🔐 The Hidden Playbook: 15 “Secrets” Every Penetration Tester Learns the Hard Way
What if I told you that most real-world hacks don’t look anything like what you see in movies?
19 views
Daily Writeups
⤷ Title: Breaking 2FA in WordPress: Account Takeover via CSRF in Google Authenticator
════════════════════════
𐀪 Author: Miguel Angel Méndez Z.
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 05:57:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #wordpress #cybersecurity #offensive_security #ethical_hacking
Medium
Breaking 2FA in WordPress: Account Takeover via CSRF in Google Authenticator
In the WordPress ecosystem, security plugins are the first line of defense. However, when they fail, the impact can be critical.
29 views
Daily Writeups
⤷ Title: A Guide To Hire A Hacker To Change Your Grades- An Expert Analysis
════════════════════════
𐀪 Author: Seanknoxx
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 05:56:34 GMT
════════════════════════
⌗ Tags: #exams_preparation #college #students #grades #ethical_hacking
Medium
A Guide To Hire A Hacker To Change Your Grades- An Expert Analysis
Perhaps are you feeling overwhelmed by the pressure to maintain perfect grades? Do you find yourself struggling to keep up with the demands…
38 views
Daily Writeups
⤷ Title: Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 14:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Active HanGhost Loader Campaign Targets Enterprise Payment and Logistics Workflows
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 08:36:40 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #ANY RUN #Cybersecurity #HanGhost Loader #Logistics
Hackread
Active HanGhost Loader Campaign Targets Enterprise Payment and Logistics Workflows
Active HanGhost Loader campaign targets enterprise payment and logistics workflows with fileless attacks, multi-stage execution, and stealthy malware delivery.
31 views
Daily Writeups
⤷ Title: JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 08:35:42 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #Brazil #DLL Sideloading #infosec #JanelaRAT #kaspersky #LATAM Cybercrime #Malware Analysis #Mexico #MFA Bypass #Session Hijacking
Daily CyberSecurity
JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
JanelaRAT targets banking users in Brazil and Mexico using window monitoring and fake updates. Learn how this 2026 threat bypasses MFA to hijack sessions.
18 views
Daily Writeups
⤷ Title: The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 07:40:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT37 #Code Cave Injection #Facebook Phishing #Fileless Malware #Genians Security Center #North Korean APT #PE Patching #RokRAT #social engineering #Wondershare PDFelement #Zoho WorkDrive
Daily CyberSecurity
The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT
APT37 pivots to Facebook social engineering, using Wondershare PDFelement "code caves" to deploy RokRAT. Learn how they bypass EDR with memory-only payloads.
15 views
Daily Writeups
⤷ Title: APT41’s New “Zero-Detection” Backdoor Targets Linux Workloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 07:00:47 +0000
════════════════════════
⌗ Tags: #Malware #Alibaba Cloud #APT41 #Breakglass Intelligence #Cloud Security #Credential Harvesting #cybersecurity #ELF Backdoor #infosec #Linux Malware #SMTP C2 #Winnti
Daily CyberSecurity
APT41’s New "Zero-Detection" Backdoor Targets Linux Workloads
APT41's new zero-detection ELF backdoor uses SMTP (Port 25) to hijack Linux cloud workloads invisibly. Secure your credentials—audit your SMTP traffic today.
12 views