Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Deleteduser.com —a $15 PII Magnet
════════════════════════
𐀪 Author: Mike Sheward
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 19:00:45 GMT
════════════════════════
⌗ Tags: #compliance #ethical_hacking #information_security #cybersecurity #privacy
Medium
Deleteduser.com —a $15 PII Magnet
When is a delete, not a delete? When it’s an publicly routable placeholder.
24 views
Daily Writeups
⤷ Title: Securing Remote Server Access: Why VPNs Matter for Administrators
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 22:39:38 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Technology #Business #Cybersecurity #VPN
Hackread
Securing Remote Server Access: Why VPNs Matter for Administrators
VPNs help secure remote server access by encrypting traffic, restricting entry to authorized users, and reducing exposure of critical systems to the internet.
20 views
Daily Writeups
⤷ Title: All It Took Was a Negative Number: A Price Manipulation Story | PortSwigger — High-Level Logic…
════════════════════════
𐀪 Author: Kate D Terracore
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 22:10:26 GMT
════════════════════════
⌗ Tags: #bug_bounty #price_manipulation #burpsuite #bug_bounty_hunter #portswigger
Medium
All It Took Was a Negative Number: A Price Manipulation Story | PortSwigger — High-Level Logic…
Not all vulnerabilities require complex payloads or advanced techniques.
Sometimes, simply entering a negative number is enough.
In this…
13 views
Daily Writeups
⤷ Title: The Session That Never Dies: Session Fixation & Hijacking on a Real Target
════════════════════════
𐀪 Author: Mohamed Elmorsy
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 21:50:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #infosec #bugs #bug_bounty_tips
Medium
The Session That Never Dies: Session Fixation & Hijacking on a Real Target
| وَكَانَ فَضْلُ اللَّهِ عَلَيْكَ عَظِيمًا
12 views
Daily Writeups
⤷ Title: TryHackMe SAST Walkthrough
════════════════════════
𐀪 Author: Rormsbee
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 21:24:04 GMT
════════════════════════
⌗ Tags: #code_review #sast #application_security #tryhackme_walkthrough #cybersecurity_training
Medium
TryHackMe SAST Walkthrough
Task 2: Code Review
17 views
Daily Writeups
⤷ Title: Access Control Vulnerabilities — Privileges Escalation
════════════════════════
𐀪 Author: ANXS3C
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 21:18:02 GMT
════════════════════════
⌗ Tags: #web_security #broken_access_control #web_penetration_testing #penetration_testing
Medium
Access Control Vulnerabilities — Privileges Escalation
Broken Access Control vulnerabilities arise when an application fails to correctly enforce authorization policies, allowing users to…
23 views
Daily Writeups
⤷ Title: AI Model Card Security Audit: AI Models & Data · AI Security · TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 21:50:38 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #tryhackme_walkthrough #tryhackme #llm #cybersecurity
Medium
AI Model Card Security Audit: AI Models & Data · AI Security · TryHackMe Walkthrough
A practical AI model assessment to identify potential security and compliance risks. AI Security Learning Path → AI Fundamentals → 3/6.
22 views
Daily Writeups
⤷ Title: Anonymizing Network Traffic: A Dive into SOCKS5 and Data Encryption
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 23:28:36 +0000
════════════════════════
⌗ Tags: #Security #Technology #Anonymity #Encryption #Proxy #SOCKS5
Hackread
Anonymizing Network Traffic: A Dive into SOCKS5 and Data Encryption
SOCKS5 protocol explained: anonymize traffic, boost security with encryption, bypass restrictions, and enable reliable data collection for business use.
18 views
Daily Writeups
⤷ Title: Analytics | HackTheBox | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 23:21:29 GMT
════════════════════════
⌗ Tags: #ctf #hackthebox #ctf_writeup #ethical_hacking #bug_bounty
Medium
Analytics | HackTheBox | OSCP Preparation
HTB:Analytics
12 views
Daily Writeups
⤷ Title: UltraTech — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Abdallah_samir
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 00:08:07 GMT
════════════════════════
⌗ Tags: #ctf #penetration_testing #hacking #tryhackme
Medium
UltraTech — TryHackMe Walkthrough
Initial Reconnaissance
10 views
Daily Writeups
⤷ Title: The Trojan Horse Quietly Hiding In Your Wordpress Website And How To Protect Yourself
════════════════════════
𐀪 Author: Inkyreadsbooks
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 23:59:48 GMT
════════════════════════
⌗ Tags: #wordpress_plugins #cybersecurity #wordpress #infosec #cybersecurity_awareness
Medium
The Trojan Horse Quietly Hiding In Your Wordpress Website And How To Protect Yourself
For over a decade, the standard advice for WordPress administrators has been: “There’s a plugin for that.” This simple “off the shelf…
17 views
Daily Writeups
⤷ Title: How I Earned OSCP+: Real Challenges, Exam Pressure, and What Actually Worked
════════════════════════
𐀪 Author: Aung Myint
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 23:41:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #active_directory #ethical_hacking #oscp
Medium
How I Earned OSCP+: Real Challenges, Exam Pressure, and What Actually Worked
Earning the OSCP+ from Offensive Security wasn’t just another certification for me — it was something I had been working toward for years…
14 views
Daily Writeups
⤷ Title: TryHackMe: Shadow Trace | Write-Up
════════════════════════
𐀪 Author: Ash T
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 00:31:04 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #information_security #tryhackme #tryhackme_writeup
Medium
TryHackMe: Shadow Trace | Write-Up
This is a write-up for the Shadow Trace room on TryHackMe which is part of the SOC Level 1 pathway. I will describe how I completed this…
22 views
Daily Writeups
⤷ Title: Implementación de Honeypot T-Pot para detección temprana de actividad maliciosa en entorno…
════════════════════════
𐀪 Author: Jenny Alava
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 23:39:59 GMT
════════════════════════
⌗ Tags: #honeypot #cybersecurity #cybercrime #ethical_hacking #siem
Medium
Implementación de Honeypot T-Pot para detección temprana de actividad maliciosa en entorno…
La práctica se estructuró bajo un enfoque incremental de capacidades defensivas. En una primera fase se implementó T-Pot como plataforma de…
23 views
Daily Writeups
⤷ Title: Cisco Patches Critical CVSS 9.9 RCE Flaws in Identity Services Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:38:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco Advisory #Cisco ISE #CVE_2026_20180 #CVE_2026_20186 #CVSS 9.9 #Denial of Service #network_security #privilege escalation #rce #Remote Code Execution #Root Escalation
Daily CyberSecurity
Cisco Patches Critical CVSS 9.9 RCE Flaws in Identity Services Engine
Cisco alerts on a critical 9.9 CVSS flaw in ISE. Even "Read-Only" admins can escalate to root and trigger a total network lockout. Patch immediately.
21 views
Daily Writeups
⤷ Title: RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:06:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chaotic Eclipse #CVE_2026_33825 #cybersecurity #Elevation of Privilege #EoP #infosec #Microsoft Security #Nightmare_Eclipse #Patch Alert #RedSun #Windows Defender #zero_day
Daily CyberSecurity
RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
Windows Defender "RedSun" zero-day revealed! This unpatched EoP flaw turns antivirus into a delivery tool for malicious payloads. PoC is public—patch now!
16 views
Daily Writeups
⤷ Title: Critical 9.8 Webex Flaw Lets Attackers Impersonate Any User
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 01:50:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Control Hub #Cisco Webex #Cloud Security #CVE_2026_20184 #cybersecurity #Identity Management #Impersonation #infosec #Patch Alert #SAML #SSO
Daily CyberSecurity
Critical 9.8 Webex Flaw Lets Attackers Impersonate Any User
Cisco Webex CVE-2026-20184 allows unauthenticated user impersonation via SSO flaw. Fix requires a manual certificate update in Control Hub. Act now!
14 views
Daily Writeups
⤷ Title: Splunk Issues Urgent Fixes for RCE and Clear-Text Token Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 01:44:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20204 #CVE_2026_20205 #Data Analytics Security #infosec #Log Management #Patch Alert #rce #Remote Code Execution #Splunk #Splunk Cloud #Splunk Enterprise
Daily CyberSecurity
Splunk Issues Urgent Fixes for RCE and Clear-Text Token Leaks
Splunk fixes CVE-2026-20204, a critical RCE flaw where low-privilege users can hijack servers via temp files. Patch Enterprise and Cloud instances now!
12 views
Daily Writeups
⤷ Title: Chrome 147 Update: Google Patches Critical $90,000 ANGLE Flaw and 30 Other Security Gaps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 01:32:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANGLE #browser security #bug bounty #CVE_2026_6296 #cybersecurity #google chrome #Heap Buffer Overflow #infosec #security update #Skia
Daily CyberSecurity
Chrome 147 Update: Google Patches Critical $90,000 ANGLE Flaw and 30 Other Security Gaps
Google patches 31 Chrome flaws, including a $90K graphics engine bug. Update to version 147.0.7727.101 now to block critical sandbox escapes and RCE risks.
12 views
Daily Writeups
⤷ Title: Root Access via Admin: The 9.9 RCE Crisis Threatening Cisco ISE Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 01:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco ISE #Cisco Security #CVE_2026_20147 #CVE_2026_20148 #Identity Services Engine #infosec #network_security #Patch Alert #rce #root access
Daily CyberSecurity
Root Access via Admin: The 9.9 RCE Crisis Threatening Cisco ISE Networks
Cisco warns of a critical 9.1 RCE flaw in Identity Services Engine (ISE). Attackers can escalate to root access—apply official security patches now!
12 views
Daily Writeups
⤷ Title: How We Built a Scalable PII Field Inventory System for Enterprise Applications
════════════════════════
𐀪 Author: Umashankara Kalaiah
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:29:05 GMT
════════════════════════
⌗ Tags: #data_management #pci_dss #pii_data #pii #application_security
Medium
How We Built a Scalable PII Field Inventory System for Enterprise Applications
Modern enterprises accumulate data faster than they can understand it.
12 views