Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Critical Hardcoded Credential Bug Hits Nexus Repository 3
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:05:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_5189 #DevSecOps #hardcoded credentials #OrientDB #Patch Alert #rce #Repository Management #Sonatype Nexus #Supply Chain Security #Vulnerability
Daily CyberSecurity
Critical Hardcoded Credential Bug Hits Nexus Repository 3
Sonatype Nexus Repository (CVE-2026-5189) faces a critical 9.2 CVSS flaw. A hardcoded database credential grants full host access. Patch to v3.71.0 now!
16 views
Daily Writeups
⤷ Title: Synology DSM Update Fixes High-Severity File Manipulation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:35:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4036 #CVE_2026_40530 #cybersecurity #Data Protection #DiskStation #DSM #File Hijacking #infosec #mitm #NAS security #Patch Alert #Synology
Daily CyberSecurity
Synology DSM Update Fixes High-Severity File Manipulation Flaws
Synology patches critical DSM flaws (CVSS 8.0) allowing file manipulation and data leaks. Secure your NAS—upgrade to DSM 7.3, 7.2.2, or 7.2.1 immediately!
17 views
Daily Writeups
⤷ Title: Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:05:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2026_34457 #infosec #Nginx auth_request #OAuth2_Proxy #OIDC #Patch Alert #User_Agent Spoofing
Daily CyberSecurity
Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources
A critical 9.1 CVSS flaw in OAuth2 Proxy allows unauthenticated users to bypass security via User-Agent spoofing. Secure your upstream apps—patch v7.15.2 today.
7 views
Daily Writeups
⤷ Title: From Debug Warnings to XSS: Exploiting a Drupal CMS Endpoint
════════════════════════
𐀪 Author: _marwankhodair_
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:16:38 GMT
════════════════════════
⌗ Tags: #web_security #xss_vulnerability #bug_bounty #xss_attack #reflected_xss
Medium
From Debug Warnings to XSS: Exploiting a Drupal CMS Endpoint
XSS Writeup by 0xMarvul
6 views
Daily Writeups
⤷ Title: The Complete Guide to Setting Up Xalgorix — The Most Powerful Open-Source AI Pentesting Agent
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:08:56 GMT
════════════════════════
⌗ Tags: #technology #ai #bug_bounty #cybersecurity #programming
Medium
The Complete Guide to Setting Up Xalgorix — The Most Powerful Open-Source AI Pentesting Agent
Xalgorix is the most comprehensive open-source AI pentesting agent. Give it a target URL, and it autonomously finds vulnerabilities using…
9 views
Daily Writeups
⤷ Title: From Critical to Low: 6 Vulnerabilities That Exposed a Web Application
════════════════════════
𐀪 Author: Seafeldeenwael
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:04:52 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bug_bounty #penetration_testing #hacking #vulnerability
Medium
From Critical to Low: 6 Vulnerabilities That Exposed a Web Application
I recently started my journey into bug hunting. Initially, when I looked for targets on popular platforms like HackerOne, Bugcrowd, and…
10 views
Daily Writeups
⤷ Title: Building a $40 Stingray Detector That Fits in an Altoids Tin
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:05:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #stingray #hacking #imsi_catcher #hacking_tools
Medium
Building a $40 Stingray Detector That Fits in an Altoids Tin
The tin clicks shut with that thin metallic snap. You toss it into a bag next to a half-dead USB cable and a notebook that smells faintly…
14 views
Daily Writeups
⤷ Title: Detecting Malware Patterns with YARA Rules
════════════════════════
𐀪 Author: Muhammad Ath Thoriq Kurnia Ramadhan
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:42:49 GMT
════════════════════════
⌗ Tags: #infosec #yara_rules #beginner #malware_analysis #cybersecurity
Medium
Detecting Malware Patterns with YARA Rules
Detecting malware patterns with YARA Rules Hello Comrades! Long time no see! In this post, I will explain the overview of YARA rules. This tool can help us with our malware analysis lab and spread …
14 views
Daily Writeups
⤷ Title: CVE-2026–22679: Unauthenticated RCE in Weaver E-cology
════════════════════════
𐀪 Author: Kerem
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:30:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #vulnerability_research
Medium
CVE-2026–22679: Unauthenticated RCE in Weaver E-cology
Debug Endpoint Exposure and Enterprise Risk
10 views
Daily Writeups
⤷ Title: From Cron Exploitation to Shell Escape: OverTheWire Bandit (Levels 23–33)
════════════════════════
𐀪 Author: Ahmed Eldkrory
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:47:32 GMT
════════════════════════
⌗ Tags: #linux_commands #linux #cybersecurity #penetration_testing #overthewire
Medium
From Cron Exploitation to Shell Escape: OverTheWire Bandit (Levels 23–33)
Author: Ahmed Abdelaziz Eldkrory (EDGAR) Junior Penetration Tester 📧 [email protected] 🔗 linkedin.com/in/ahmed-eldkrory
11 views
Daily Writeups
⤷ Title: Modifying Mimikatz to Evade Defender (2026)
════════════════════════
𐀪 Author: lainkusanagi
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:43:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #mimikatz #red_teaming #antivirus_evasion
Medium
Modifying Mimikatz to Evade Defender (2026)
Friend link if you aren’t a Medium member.
11 views
Daily Writeups
⤷ Title: Your Crops Are Struggling and the Answer Is Literally Under Your Feet
════════════════════════
𐀪 Author: Iinfo
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:25:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #developer_tools #agriculture #environment #science
Medium
Your Crops Are Struggling and the Answer Is Literally Under Your Feet
Most farmers blame weather, pests, or nutrients when yields disappoint. The real culprit is often something nobody bothered to measure soil…
12 views
Daily Writeups
⤷ Title: Defending Azure on TryHackMe | first review
════════════════════════
𐀪 Author: GoliTech
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:59:54 GMT
════════════════════════
⌗ Tags: #tryhackme #sentinel_and_xdr #defending_azure #cybersecurity_training #cloud_security_course
Medium
Defending Azure on TryHackMe | first review
I recently picked up the Defending Azure course/path on TryHackMe, and I’ve just started going through it. So far, I’m really enjoying it…
10 views
Daily Writeups
⤷ Title: Detailed Investigative Report : Phishing Attack Analysis
════════════════════════
𐀪 Author: Jennifer Setiawan
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:50:26 GMT
════════════════════════
⌗ Tags: #tryhackme #blue_team #phishing #cybersecurity #incident_response
Medium
Detailed Investigative Report : Phishing Attack Analysis
Menganalisis lampiran email mencurigakan | Mengekstrak URL berbahaya | Mengidentifikasi kredensial yang telah dicuri
9 views
Daily Writeups
⤷ Title: Agent Sudo — TryHackMe Write-up
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:49:05 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #web_penetration_testing #red_team
Medium
Agent Sudo — TryHackMe Write-up
Date: 17/08/2025
15 views
Daily Writeups
⤷ Title: Prompt Engineering | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 12:57:02 GMT
════════════════════════
⌗ Tags: #tryhackme #ai_prompt_engineering #prompt_engineering
Medium
Prompt Engineering | TryHackMe
Task 1 Introduction:
15 views
Daily Writeups
⤷ Title: TryHackMe Letter Write up
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 12:53:32 GMT
════════════════════════
⌗ Tags: #osint #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe Letter Write up
Can you help us find out more about this letter?
22 views
Daily Writeups
⤷ Title: April 2026 Microsoft Security Update Cycle
════════════════════════
𐀪 Author: Sovereign Order of Enigmatic Republics: ZadienLabs
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:58:15 GMT
════════════════════════
⌗ Tags: #rce #april_patch #microsoft_updates #security_update #exploit_patches
Medium
April 2026 Microsoft Security Update Cycle
Enterprise Vulnerability Analysis, Mitigation Strategy, and Deployment Framework
38 views
Daily Writeups
⤷ Title: How I Secured the Dutch Government(ncsc-nl): “Critical” Financial Leak
════════════════════════
𐀪 Author: Enterlectury
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 15:56:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #dutchgov #bug_bounty #nciip
Medium
How I Secured the Dutch Government(ncsc-nl): “Critical” Financial Leak
It all started while I was scrolling through Twitter. I came across a post by Sheikh Rishad about securing the UK Government. Seeing the…
31 views
Daily Writeups
⤷ Title: From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
════════════════════════
𐀪 Author: Vanshrathore
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 15:18:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #html_injection #bug_hunting #money
Medium
🔥From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android
21 views
Daily Writeups
⤷ Title: [Bug Bounty] I Got Tired of Running the Same 40 Tests. So I Built an AI That Does It For Me.
════════════════════════
𐀪 Author: N1neKitsune
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:59:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #ai #cybersecurity
Medium
[Bug Bounty] I Got Tired of Running the Same 40 Tests. So I Built an AI That Does It For Me🦊
How Claude Code went from a coding assistant to a full autonomous bug bounty hunter and the painful lessons along the way.
18 views