Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: 167 Bugs Fixed, Two Already Being Used Against You, and One Deadline That Could Brick Your PC
════════════════════════
𐀪 Author: MayhemCode
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:15:51 GMT
════════════════════════
⌗ Tags: #technology #windows #programming #hacking #cybersecurity
Medium
167 Bugs Fixed, Two Already Being Used Against You, and One Deadline That Could Brick Your PC
Microsoft’s second-largest security update ever is out — and buried inside it is a SharePoint flaw attackers were already exploiting, a…
23 views
Daily Writeups
⤷ Title: Exploiting SSRF to Access AWS EC2 Instance Metadata
════════════════════════
𐀪 Author: Sumeet Mahadik
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:28:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
Exploiting SSRF to Access AWS EC2 Instance Metadata
Hello friends, I hope you’re doing well.
9 views
Daily Writeups
⤷ Title: Pentesting Android en claro: del Manifest al hallazgo
════════════════════════
𐀪 Author: FN8
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:50:49 GMT
════════════════════════
⌗ Tags: #android #cybersecurity #ciberseguridad #technology #hacking
Medium
Pentesting Android en claro: del Manifest al hallazgo
Ayer tuve la oportunidad de asistir a un taller de Pentesting Android en la ViCONgal impartido por Carolina Gómez Uriarte, y la verdad… fue…
13 views
Daily Writeups
⤷ Title: Why Nmap Fails When Enumerating Websites — And What to Do About It
════════════════════════
𐀪 Author: Ahi&Hacking
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:17:39 GMT
════════════════════════
⌗ Tags: #nmap #networking #infosec #cybersecurity
Medium
Why Nmap Fails When Enumerating Websites — And What to Do About It
The tool is legendary. The results are sometimes not. Here’s what silently kills your scans.
9 views
Daily Writeups
⤷ Title: Ffuf: The Tool That Helps You Find What Others Miss
════════════════════════
𐀪 Author: m0cha_
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:19:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #kali_linux #vapt #offensive_security #penetration_testing
Medium
Ffuf: The Tool That Helps You Find What Others Miss
When you start testing web applications, it feels like everything is visible.
10 views
Daily Writeups
⤷ Title: IP Address Classes in Ethical Hacking Explained
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:14:22 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #ip_address #network_security
Medium
IP Address Classes in Ethical Hacking Explained
Understanding IP addressing is a fundamental skill for anyone entering the world of ethical hacking. Before scanning networks, identifying…
8 views
Daily Writeups
⤷ Title: LLMborghini | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:31:02 GMT
════════════════════════
⌗ Tags: #ai #llm #ctf #tryhackme #cybersecurity
Medium
LLMborghini | TryHackMe Write-up
Hello everyone! In this write-up, we’ll walk through how to solve the LLMborghini challenge on TryHackMe.
15 views
Daily Writeups
⤷ Title: How I Passed OSCP and OSCP+ on My First Attempt with 90/100 Points
════════════════════════
𐀪 Author: Adlurijanakivallabh
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:03:25 GMT
════════════════════════
⌗ Tags: #offsec #tryhackme #provinggrounds #hackthebox #oscp
Medium
How I Passed OSCP and OSCP+ on My First Attempt with 90/100 Points
A complete guide — preparation, exam experience and every resource that actually helped.
24 views
Daily Writeups
⤷ Title: Shodan: Uncovering the Hidden Layer of the Internet
════════════════════════
𐀪 Author: Sumit
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:28:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #shodan_search_engine #ethical_hacking #osint_investigation #osint
Medium
📝 Shodan: Uncovering the Hidden Layer of the Internet
Homepage of Shodan
36 views
Daily Writeups
⤷ Title: SQL Injection on DVWA
════════════════════════
𐀪 Author: Harits AR
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 06:11:00 GMT
════════════════════════
⌗ Tags: #sqli #dvwa #sql_injection #dvwa_sql_injection
Medium
SQL Injection on DVWA
Introduction SQL Injection
SQL Injection adalah web vulnerability di mana penyerang menyisipkan perintah SQL berbahaya ke dalam input…
44 views
Daily Writeups
⤷ Title: Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 16:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: 52M-Download protobuf.js Library Hit by RCE in Schema Handling
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 10:42:15 +0000
════════════════════════
⌗ Tags: #Security #cloud #Cyber Attack #Cybersecurity #NPM #protobuf #RCE
Hackread
52M-Download protobuf.js Library Hit by RCE in Schema Handling
Critical RCE flaw in protobuf.js lets attackers execute code via malicious schemas. Learn who is at risk, affected versions, and how to fix it.
32 views
Daily Writeups
⤷ Title: New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:11:43 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #botnet #Cisco Talos #cyber_espionage #Czech Republic #EDEKA Phishing #Heroku Abuse #infosec #Malware Analysis #PowerShell Malware #PowMix #REST API Mimicry
Daily CyberSecurity
New "PowMix" Botnet Preys on Czech Workforce with Lure of Compliance
Cisco Talos uncovers PowMix, a stealthy botnet targeting Czech HR via AMSI bypass and Heroku-hosted C2. Learn how this malware evades modern EDR systems.
24 views
Daily Writeups
⤷ Title: AI Agents Think. They Just Don’t Know They’re Being Watched.
════════════════════════
𐀪 Author: Adesh Kolte
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:13:57 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #infosec #cybersecurity
Medium
AI Agents Think. They Just Don’t Know They’re Being Watched.
Introduction
22 views
Daily Writeups
⤷ Title: From Nothing to Full Admin Access: Chaining Broken Access Controls
════════════════════════
𐀪 Author: can1337
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:12:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #abc #vulnerability #broken_access_control
Medium
From Nothing to Full Admin Access: Chaining Broken Access Controls
Broken Access Controls are everywhere. In application security, they show up in many different ways. Sometimes they come from poorly…
22 views
Daily Writeups
⤷ Title: How a Simple OTP Flaw Could Lead to Full Account Takeover
════════════════════════
𐀪 Author: blackmambaa001
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 10:12:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #exploitation #otp_bypass #hacking #bug_bounty
Medium
How a Simple OTP Flaw Could Lead to Full Account Takeover
Who Am I?
18 views
Daily Writeups
⤷ Title: Hardening the Gates: The Definitive Guide to Android IPC & Service Security
════════════════════════
𐀪 Author: Sivavishnu
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:05:08 GMT
════════════════════════
⌗ Tags: #mobile_app_security #android_architecture #android_development #kotlin #application_security
Medium
Hardening the Gates: The Definitive Guide to Android IPC & Service Security
Beyond android:exported: Secure Android IPC with signature permissions, caller validation, and Confused Deputy attack prevention
15 views
Daily Writeups
⤷ Title: Under Siege: How the First 112 Days of 2026 Rewrote the Rules of DeFi Risk
════════════════════════
𐀪 Author: Nitin Vinayachandran
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:42:30 GMT
════════════════════════
⌗ Tags: #hacking #cryptocurrency #defi
Medium
Under Siege: How the First 112 Days of 2026 Rewrote the Rules of DeFi Risk
With over $450 million drained across a cascade of exploits, cross-chain attacks, and a disturbing rise in human targeting, the industry…
13 views
Daily Writeups
⤷ Title: OpenAEV (OpenBAS) Unauthenticated Account Takeover Vulnerability Leads to Platform Compromise
════════════════════════
𐀪 Author: Nahit Sogutlu
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:19:39 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #code_review #account_takeover #hacking
Medium
OpenAEV (OpenBAS) Unauthenticated Account Takeover Vulnerability Leads to Platform Compromise
Prelude
25 views
Daily Writeups
⤷ Title: You Don’t Need to Hack the System. You Just Need to Make People Think You Did.
════════════════════════
𐀪 Author: Hafiq Iqmal
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:15:49 GMT
════════════════════════
⌗ Tags: #scam #security #psyops #cybersecurity #hacking
Medium
You Don’t Need to Hack the System. You Just Need to Make People Think You Did.
How fake data breaches became the sharpest tool in the information warfare playbook
21 views
Daily Writeups
⤷ Title: Booking.com Got Breached. Your Reservation Was the Weapon.
════════════════════════
𐀪 Author: Defense Stack
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:14:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec_write_ups #infosec #privacy #hacking
Medium
Booking.com Got Breached. Your Reservation Was the Weapon.
In april 13th 2026, online travel agency booking.com issued a major notification that echoed back to 2021. There was unauthorized access to…
15 views