Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: How to Increase Bug Bounty Impact with Fuzzing techniques
════════════════════════
𐀪 Author: c9lab
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:20:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #cyber_security_awareness
Medium
How to Increase Bug Bounty Impact with Fuzzing techniques
Bug bounty programs have fundamentally changed how organizations approach security.
12 views
Daily Writeups
⤷ Title: Hackers don’t need your password anymore.
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:19:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #programming #bug_bounty #ai
Medium
Hackers don’t need your password anymore.
They just steal the golden ticket your browser is already holding — and you’d never even notice.
13 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #web_security #http_request_smuggling
Medium
HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
Introduction
14 views
Daily Writeups
⤷ Title: Bypassing 2FA: How a Flawed SSO Architecture Led to Complete Account Takeover
════════════════════════
𐀪 Author: Shreyash Mall
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:25 GMT
════════════════════════
⌗ Tags: #python #cybersecurity #bug_bounty #software_development
Medium
Bypassing 2FA: How a Flawed SSO Architecture Led to Complete Account Takeover
It started as a standard assessment. The target was a primary web portal tightly coupled with a secondary dashboard via Single Sign-On…
17 views
Daily Writeups
⤷ Title: A Bittersweet Goodbye to Medium After One Year…..!!
════════════════════════
𐀪 Author: Maverick
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 08:12:07 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology
Medium
A Bittersweet Goodbye to Medium After One Year…..!!
Hey everyone,
13 views
Daily Writeups
⤷ Title: CISCO Notes Networking Basics — Module 4 — Build a Home Network
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:23:22 GMT
════════════════════════
⌗ Tags: #web_development #ethical_hacking #artificial_intelligence #cybersecurity #infosec
Medium
CISCO Notes Networking Basics — Module 4 — Build a Home Network
Starting my networking journey with Cisco 📡
12 views
Daily Writeups
⤷ Title: ⚖️ Responsible Disclosure: How to Report Security Bugs Legally
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:22:16 GMT
════════════════════════
⌗ Tags: #web_development #technology #cybersecurity #infosec #ethical_hacking
Medium
⚖️ Responsible Disclosure: How to Report Security Bugs Legally
Core Idea:-
9 views
Daily Writeups
⤷ Title: Walkthrough: Exploiting Indirect Prompt Injection in TryHackMe’s LLMborghini
════════════════════════
𐀪 Author: VxOM
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 08:10:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #tryhackme #ai_hack #llm
Medium
Walkthrough: Exploiting Indirect Prompt Injection in TryHackMe’s LLMborghini
This is a full walkthrough for the LLMborghini room on TryHackMe. Note: To respect the creators and the platform’s rules, this guide…
20 views
Daily Writeups
⤷ Title: Windows Privilege Escalation Skills Assessment — Part II Walkthrough
════════════════════════
𐀪 Author: Psychopath-Traveler
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:14:40 GMT
════════════════════════
⌗ Tags: #ethical_hacking #windows_privilege_esc #windows_ineternal_enume
Medium
Windows Privilege Escalation Skills Assessment — Part II Walkthrough
As an add-on to their annual penetration test, the INLANEFREIGHT organization has asked you to perform a security review of their standard…
31 views
Daily Writeups
⤷ Title: AI Supply Chain Attacks: Poisoning the Data That Powers Intelligent Systems
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:02:26 GMT
════════════════════════
⌗ Tags: #supply_chain #cybersecurity #information_security #ai #ethical_hacking
Medium
AI Supply Chain Attacks: Poisoning the Data That Powers Intelligent Systems
Introduction: The New Frontier of Cyber Threats
28 views
Daily Writeups
⤷ Title: Stop SQL Injection Attacks Before They Start (A Practical Guide for Developers)
════════════════════════
𐀪 Author: PAPPURAJ BHOTTACHARJEE
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:12:34 GMT
════════════════════════
⌗ Tags: #security #web_security #attack #vulnerability #sql_injection
Medium
Stop SQL Injection Attacks Before They Start (A Practical Guide for Developers)
A junior engineer once deployed a simple login feature.
36 views
Daily Writeups
⤷ Title: Researchers Say Fiverr Left User Files Open to Google Search
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:42:26 +0000
════════════════════════
⌗ Tags: #Security #Leaks #Privacy #Cloudinary #Cybersecurity #Fiverr #Freelancing #Google
Hackread
Researchers Say Fiverr Left User Files Open to Google Search
Private Fiverr user documents, including tax records and IDs, were reportedly found in Google search results due to a storage configuration issue.
25 views
Daily Writeups
⤷ Title: Zero-Exfil Hijacking: How VMkatz Rips Windows Credentials Directly from VM Snapshots
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:30:13 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Credential Extraction #Hypervisor Attack #Pentesting #red teaming #Virtualization Security #VMDK #VMkatz #VMSN #Windows Security
Penetration Testing Tools
Zero-Exfil Hijacking: How VMkatz Rips Windows Credentials Directly from VM Snapshots
Extract NTLM hashes, Kerberos tickets, and BitLocker keys directly from .vmdk and .vmsn files. VMkatz lets you loot virtual machines without massive exfiltration.
16 views
Daily Writeups
⤷ Title: Navigation Traps: Google’s New June 2026 Penalty Targets Back Button Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:25:56 +0000
════════════════════════
⌗ Tags: #Google #ad tech #Back Button Hijacking #Google Search #Google Spam Policy #June 2026 Update #Malicious Practices #Search Console #SEO Compliance #User Experience #Web Browser Navigation
Penetration Testing Tools
Navigation Traps: Google’s New June 2026 Penalty Targets Back Button Hijacking
Google is intensifying its campaign against predatory web practices by instituting stringent prohibitions on one of the internet’s
13 views
Daily Writeups
⤷ Title: Digital Emergency: Massive April Patch Tuesday Fixes Active Exploits and “Wormable” Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:23:57 +0000
════════════════════════
⌗ Tags: #Vulnerability #Acrobat Reader #adobe #CVE_2026_32201 #cybersecurity #Microsoft #Patch Tuesday #remote code execution #SharePoint #Windows Defender #zero_day
Penetration Testing Tools
Digital Emergency: Massive April Patch Tuesday Fixes Active Exploits and "Wormable" Flaws
The April iteration of “Patch Tuesday” has arrived with such consequence that to overlook it would be an
15 views
Daily Writeups
⤷ Title: Beyond the Legacy: OpenSSL 4.0.0 Arrives with Encrypted Client Hello and Post-Quantum Prep
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:19:10 +0000
════════════════════════
⌗ Tags: #Technology #API Migration #cryptography #Cyber Security #Encrypted Client Hello #Infosec #open source software #OpenSSL 4.0.0 #Post_Quantum Cryptography #SSLv3 #TLS 1.3
Penetration Testing Tools
Beyond the Legacy: OpenSSL 4.0.0 Arrives with Encrypted Client Hello and Post-Quantum Prep
The OpenSSL Project has inaugurated a seminal update that profoundly reshapes both its internal architecture and its repertoire
13 views
Daily Writeups
⤷ Title: Sunk by a Script: How a Fuel System Breach Exposed the Global NYK Line Network
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:17:20 +0000
════════════════════════
⌗ Tags: #Data Leak #cyber attack #data breach #Fuel Procurement System #Infosec #Japan Tech News #Logistics #Maritime Security #NYK Line #Personal Data Protection #Supply Chain Security
Penetration Testing Tools
Sunk by a Script: How a Fuel System Breach Exposed the Global NYK Line Network
A Japanese maritime transport conglomerate has encountered a significant data breach following the compromise of its internal fuel
12 views
Daily Writeups
⤷ Title: The Kernel Ghost: How Predator Spyware Hijacks iPhone NEON Registers to Vanish into iOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:16:34 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #iOS Security #iPhone XS #Jamf Threat Labs #JavaScriptCore #Kernel Exploit #Mobile Malware #NEON Registers #Pointer Authentication (PAC) #Predator Spyware
Penetration Testing Tools
The Kernel Ghost: How Predator Spyware Hijacks iPhone NEON Registers to Vanish into iOS
The commercial spyware Predator has proven far more ingenious than previously surmised. Rather than merely infiltrating the iPhone’s
14 views
Daily Writeups
⤷ Title: ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:09:12 +0000
════════════════════════
⌗ Tags: #Malware #Asus #CVE_2024_21833 #cybersecurity #GitHub Actions #malware #proxy network #ShadowLink #supply chain attack #TP_Link #Xygeni
Penetration Testing Tools
ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
The compromise of a residential router may initially appear as a localized grievance, while the manipulation of code
13 views
Daily Writeups
⤷ Title: Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:06:16 +0000
════════════════════════
⌗ Tags: #Technology #Encrypted ClientHello #HTTP Early Hints #HTTP/2 Upstream #load balancing #Multipath TCP #Networking #NGINX 1.30.0 #OpenSSL 4.0 #reverse proxy #Web Server
Penetration Testing Tools
Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
Nginx has inaugurated the stable 1.30.0 release, successfully concluding an extensive developmental cycle within the 1.29.x branch. This
14 views
Daily Writeups
⤷ Title: Google’s New Prepaid Credits Prevent Gemini API Key Disasters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:17:07 +0000
════════════════════════
⌗ Tags: #Technology #API security #Cloud Costs #Cost Management #cybersecurity #Gemini API #Google AI Studio #Google Cloud Billing #Google Gemini 3.1 #Prepaid Credits #software development
Daily CyberSecurity
Google’s New Prepaid Credits Prevent Gemini API Key Disasters
Google introduces Prepaid Credits and Project Spend Caps for the Gemini API. Protect your cloud account from leaked key overages and surprise billing cycles.
12 views