Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: PortSwigger “JWT authentication bypass via algorithm confusion” Lab Çözüm & Rehber
════════════════════════
𐀪 Author: Mirac Kayikci
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 19:41:47 GMT
════════════════════════
⌗ Tags: #portswigger #jwt #cybersecurity #walkthrough #hacking
Medium
PortSwigger “JWT authentication bypass via algorithm confusion” Lab Çözüm & Rehber
Algorithm confusion attacks nedir?
30 views
Daily Writeups
⤷ Title: HTB: Preignition Box Walkthrough
════════════════════════
𐀪 Author: Coldstart Coder
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 19:28:23 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #hacking #hackthebox_writeup #hackthebox
Medium
HTB: Preignition Box Walkthrough
We’re back with the 6th box in the Starting Point Tier 0 series! Preignition!
21 views
Daily Writeups
⤷ Title: HTB: Explosion Box Walkthrough
════════════════════════
𐀪 Author: Coldstart Coder
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 19:09:26 GMT
════════════════════════
⌗ Tags: #hacking #hackthebox
Medium
HTB: Explosion Box Walkthrough
We’re continuing our series Hack the Box challenges with the Explosion box! This is box 5 of the tier 0 starting point boxes and is a bit…
18 views
Daily Writeups
⤷ Title: Intermediate Practical Malware Analysis Course
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 20:42:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #malware #infosec #cybercrime #pentesting
Medium
Intermediate Practical Malware Analysis Course
The Intermediate Practical Malware Analysis course represents the critical bridge between foundational knowledge and professional-grade…
15 views
Daily Writeups
⤷ Title: TryHackMe — VulnNet: Active: Writeup
════════════════════════
𐀪 Author: Taher Borgi
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 19:11:05 GMT
════════════════════════
⌗ Tags: #active_directory #penetration_testing #cybersecurity #tryhackme #ethical_hacking
Medium
TryHackMe — VulnNet: Active: Writeup
Room: VulnNet: Active Difficulty: Medium Operating System: Windows Made by: @SkyWaves
26 views
Daily Writeups
⤷ Title: No Macros Required: Harvesting AD Credentials with a Simple Word Doc
════════════════════════
𐀪 Author: Will Giles | Cybersecurity
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 19:07:53 GMT
════════════════════════
⌗ Tags: #social_engineering #active_directory #active_directory_security #cybersecurity #penetration_testing
Medium
No Macros Required: Harvesting AD Credentials with a Simple Word Doc
Exploring how a simple phishing email can turn a curious click into compromised domain credentials.
35 views
Daily Writeups
⤷ Title: LOOKBACK - TRY HACK ME- ROOM
════════════════════════
𐀪 Author: 5kullk3r
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 20:06:01 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #cybersecurity #ctf #tryhackme_writeup
Medium
LOOKBACK - TRY HACK ME- ROOM
Hello everyone! This is an easy rated room from the TryHackMe platform titled “LOOKBACK”
33 views
Daily Writeups
⤷ Title: The Next.js Nightmare? Vercel Investigates “Critical” Internal Breach and Supply Chain Threat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:59:43 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity news #Data Breach #github #infosec #Next.js #npm #Secret Rotation #ShinyHunters #supply chain attack #Turbo.js #Vercel
Daily CyberSecurity
The Next.js Nightmare? Vercel Investigates "Critical" Internal Breach and Supply Chain Threat
Vercel investigates a major breach by ShinyHunters. With Next.js source code and tokens at risk, developers must rotate secrets immediately. Stay updated.
35 views
Daily Writeups
⤷ Title: 7 ferramentas de engenharia social
════════════════════════
𐀪 Author: Moprius
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 00:15:26 GMT
════════════════════════
⌗ Tags: #osint #information_security #hacking #technology #cybersecurity
Medium
7 ferramentas de engenharia social
Há um ponto em que a conversa sobre engenharia social deixa de ser abstrata e passa a tocar a infraestrutura concreta do ataque. É aí que…
27 views
Daily Writeups
⤷ Title: I created security agents workflow that auto review your PRs on Azure , Github and Gitlab
════════════════════════
𐀪 Author: Jay@ Thinkode AI +
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:08:14 GMT
════════════════════════
⌗ Tags: #browser_extension #cloud_security #penetration_testing #code_review
Medium
I created security agents workflow that auto review your PRs on Azure , Github and Gitlab
Hello peer developers,
37 views
Daily Writeups
⤷ Title: From Second-Order SQLi to Full RCE: Breaking Through Filters in a Multi-Tenant Export Engine
════════════════════════
𐀪 Author: Omar Elshopky (3l5h0pky)
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:02:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_development #cybersecurity #sql_injection #postgresql
Medium
From Second-Order SQLi to Full RCE: Breaking Through Filters in a Multi-Tenant Export Engine
Turning a constrained second-order SQL injection into full RCE by bypassing filters using PostgreSQL tricks and payload reconstruction.
38 views
Daily Writeups
⤷ Title: Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:26:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_39808 #CWE_78 #Exploit Disclosure #Fortinet Security #FortiSandbox #infosec #Patch Alert #PoC #rce #root access
Daily CyberSecurity
Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed
Critical 9.1 CVSS flaw in FortiSandbox: Full PoC & details for CVE-2026-39808 are now public. Unauthenticated root RCE is possible. Upgrade to 4.4.9 immediately.
32 views
Daily Writeups
⤷ Title: JanaWare’s 5-Year Geofenced Ransomware Reign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:05:39 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #Adwind RAT #cybersecurity #Geofencing #infosec #JanaWare #phishing #Polymorphic Malware #ransomware #SMB Security #Turkey
Daily CyberSecurity
JanaWare’s 5-Year Geofenced Ransomware Reign
Acronis uncovers JanaWare, a persistent ransomware targeting Turkey since 2020. Discover how geofencing and polymorphism keep this threat in the shadows.
19 views
Daily Writeups
⤷ Title: Windows Snipping Tool Can Leak Your Identity, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blackarrow #Deep Link #Exploit Code #Microsoft Security #ms_screensketch #NTLM Disclosure #proof_of_concept #Tarlogic #Windows Snipping Tool #Windows vulnerability
Daily CyberSecurity
Windows Snipping Tool Can Leak Your Identity, PoC Available
Detailed PoC and exploit code for CVE-2026-33829 are now public. See how the Windows Snipping Tool can leak NTLM hashes and how to patch the flaw.
15 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:29:13 +0000
════════════════════════
⌗ Tags: #Weekly Recap #AI Infrastructure #Apache ActiveMQ #CISA KEV #CVE_2026_21643 #cybersecurity #Fortinet #Legacy Software Security #MCP Security #Model Context Protocol #vulnerability management
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
This week's digest: 1,214 new bugs, including active exploits on 2009 Excel fossils and critical 10.0 flaws in new AI/MCP infrastructure. Priority: Patch now.
14 views
Daily Writeups
⤷ Title: More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #BTMOB #cybersecurity #Cyble #infosec #Infostealer #Lumolight #Malware Delivery Framework #MiningDropper #mobile security #rat
Daily CyberSecurity
More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
Cyble reveals MiningDropper, a modular Android threat delivering RATs and infostealers via multi-stage payloads. Protect your mobile devices now.
25 views
Daily Writeups
⤷ Title: Overwatch || HTB Machine | Lab
════════════════════════
𐀪 Author: #UNKNOWN
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:55:10 GMT
════════════════════════
⌗ Tags: #hackthebox #hacks #hacking #ethical_hacking
Medium
Overwatch || HTB Machine | Lab
STEP I: Start with basic enumeration part using nmap
17 views
Daily Writeups
⤷ Title: Your API Keys Aren’t Safe — And the Vercel Incident Proves It
════════════════════════
𐀪 Author: RipeLemons
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:05:15 GMT
════════════════════════
⌗ Tags: #hacking #security #ai #software_development #api
Medium
🚨 Your API Keys Aren’t Safe — And the Vercel Incident Proves It
🚨 Your API Keys Aren’t Safe — And the Vercel Incident Proves It If you believe your credentials are safe because you’re using a trusted platform… you’re trusting the wrong …
12 views
Daily Writeups
⤷ Title: Reconstruct any Unity game with Coding Agents
════════════════════════
𐀪 Author: Alex Zeez
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:48:26 GMT
════════════════════════
⌗ Tags: #game_development #agentic_workflow #hacking #reverse_engineering #unity
Medium
Reconstruct any Unity game with Coding Agents
In 2026, de-compile, rip assets, and reconstruct nearly any C# Unity game, even if obfuscated. To prove it, I’ll show you how I did it.
11 views
Daily Writeups
⤷ Title: Vercel Got Powned By An OAuth App. Again… Here Is What Happened and What You Should Do
════════════════════════
𐀪 Author: Mandar Karhade, MD. PhD.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:47 GMT
════════════════════════
⌗ Tags: #hacking #generative_ai_tools #software_development #ai_agent #artificial_intelligence
Medium
Vercel Got Powned By An OAuth App. Again… Here Is What Happened and What You Should Do
And if you installed the same AI tool they did, you’re already in the blast radius.
17 views
Daily Writeups
⤷ Title: Ferramentas para hacking e auditoria
════════════════════════
𐀪 Author: Moprius
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:32:32 GMT
════════════════════════
⌗ Tags: #information_security #red_team #penetration_testing #cybersecurity #hacking
Medium
Ferramentas para hacking e auditoria
A fragilidade de um sistema quase nunca se revela à primeira vista. A superfície parece estável, o serviço responde, a autenticação…
16 views