Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Meta Cross-Account 2FA Bypass via Linked Accounts worth $$$
════════════════════════
𐀪 Author: D4LT0N
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 23:24:07 GMT
════════════════════════
⌗ Tags: #bug_hunting #hacking #bug_bounty #business_logic #pentesting
Medium
Meta Cross-Account 2FA Bypass via Linked Accounts worth $$$
When I was digging through Account Center looking for potential vulnerabilities, and after reading several previous reports about 2FA…
15 views
Daily Writeups
⤷ Title: Day 3: Build Your Hacking Lab — Kali Linux Setup on VirtualBox & VMware (Step-by-Step)
════════════════════════
𐀪 Author: HusnaAnjum
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 00:46:08 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #setup #ethical_hacking #cybersecurity
Medium
Day 3: Build Your Hacking Lab — Kali Linux Setup on VirtualBox & VMware (Step-by-Step)
Part 1: Virtual Lab Setup
18 views
Daily Writeups
⤷ Title: HackMyVM: Jabita Walkthrough
════════════════════════
𐀪 Author: Antonio
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 00:31:03 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #ctf_walkthrough #hackmyvm #hacking
Medium
HackMyVM: Jabita Walkthrough
Machine details
15 views
Daily Writeups
⤷ Title: TryHackMe — Poster
════════════════════════
𐀪 Author: Kira @ hKiSec
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 00:07:34 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_writeup #cybersecurity #postgresql #ctf
Medium
TryHackMe — Poster
A Beginner’s Challenge from Exploiting PostgreSQL Weaknesses to Root Privileges
15 views
Daily Writeups
⤷ Title: The Cybersecurity Expert Said APIs Should Never Face the Frontend.
════════════════════════
𐀪 Author: Hafiq Iqmal
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #software_engineering #backend_development #api_security #cybersecurity #web_development
Medium
The Cybersecurity Expert Said APIs Should Never Face the Frontend. They Are Half Right and Fully Dangerous.
Hiding your API URL is not security. Here is where the advice breaks down and what the person probably meant to say.
19 views
Daily Writeups
⤷ Title: Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:09:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC Security #CVE_2026_3517 #CVE_2026_3518 #CVE_2026_3519 #CVE_2026_4048 #infosec #Kemp LoadMaster #os command injection #Patch Alert #Progress Software #WAF Bypass
Daily CyberSecurity
Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched
Progress Kemp LoadMaster reveals 5 high-severity vulnerabilities, including a WAF bypass and OS command injection. Secure your ADC with the April 2026 patch.
20 views
Daily Writeups
⤷ Title: RondoDox Botnet Hijacks Everything from IoT to Fortnite
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:01:00 +0000
════════════════════════
⌗ Tags: #Malware #anti_debugging #Bitsight #botnet #dos attack #Fileless Malware #infosec #IoT security #Malware Analysis #Monero mining #Nanomites #RondoDox #XMRig
Daily CyberSecurity
RondoDox Botnet Hijacks Everything from IoT to Fortnite
BitSight unmasks RondoDox: a modular botnet using "nanomites" to dodge debuggers while hijacking 18 architectures for Monero mining and gaming DoS attacks.
16 views
Daily Writeups
⤷ Title: ASUSTOR Issues Critical Patch: Command Injection Vulnerability Threatens ADM Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:00:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADM #ASUSTOR #Command Injection #CVE_2026_6644 #Data Protection #infosec #NAS security #Patch Alert #rce #VPN vulnerability
Daily CyberSecurity
ASUSTOR Issues Critical Patch: Command Injection Vulnerability Threatens ADM Users
ASUSTOR issues an urgent fix for CVE-2026-6644, a critical 9.4 CVSS flaw in ADM's VPN client allowing full NAS takeover. Patch to ADM 5.1.3.RGL1 now.
11 views
Daily Writeups
⤷ Title: ZionSiphon: The “Defanged” Malware Aiming for the Water Supply
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 01:01:16 +0000
════════════════════════
⌗ Tags: #Malware #Critical Infrastructure #Darktrace #Desalination Security #ICS Malware #Industrial Sabotage #infosec #Israel #Modbus #OT Security #Water Treatment #ZionSiphon
Daily CyberSecurity
ZionSiphon: The "Defanged" Malware Aiming for the Water Supply
Darktrace uncovers ZionSiphon, a malware strain targeting water treatment via Modbus logic. Discover the new frontier of Israel-focused industrial sabotage.
10 views
Daily Writeups
⤷ Title: OpenAdmin | HTB Writeup | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:01:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hackthebox #ctf #bug_bounty #technology
Medium
OpenAdmin | HTB Writeup | OSCP Preparation
Evening friends and enemies. This is a quick run through of OpenAdmin as part of my OSCP preparation.
9 views
Daily Writeups
⤷ Title: AI + Metasploit = Auto & Easy Hacking?
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 01:07:18 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #tech #ai #hacking
Medium
AI + Metasploit = Auto & Easy Hacking?
You Can Now Tell Claude “Hack That Server” But Here’s What Nobody’s Telling You About the Risks
12 views
Daily Writeups
⤷ Title: Understanding Darknet Marketplace Categories: A Research Perspective
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 01:04:45 GMT
════════════════════════
⌗ Tags: #infosec #darkweb #osint #cybersecurity
Medium
Understanding Darknet Marketplace Categories: A Research Perspective
The structure of darknet markets has evolved significantly over the past decade. Instead of chaotic listings, most platforms now rely on…
18 views
Daily Writeups
⤷ Title: Beginner Cybersecurity Project That Taught Me More Than Courses
════════════════════════
𐀪 Author: Adekunle A. J
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:00:10 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #software_development #penetration_testing
Medium
Beginner Cybersecurity Project That Taught Me More Than Courses
Most people start cybersecurity by watching videos, reading PDFs, and memorizing concepts.
24 views
Daily Writeups
⤷ Title: XSS Reflected on DVWA
════════════════════════
𐀪 Author: Harits AR
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 01:25:21 GMT
════════════════════════
⌗ Tags: #xs #dvwa_xss_reflected #xss_attack #reflected_xss #dvwa_xss
Medium
XSS Reflected on DVWA
Introduction
Reflected Cross-Site Scripting (XSS) adalah celah keamanan web yang terjadi ketika input pengguna tidak disanitasi dengan…
30 views
Daily Writeups
⤷ Title: The Ghost in the Browser: Is Claude Desktop Clandestinely Installing a Surveillance Bridge?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 04:21:04 +0000
════════════════════════
⌗ Tags: #Data Leak #Alexander Hanff #Anthropic #browser security #Chromium #Claude Desktop #cybersecurity #Data Protection #Digital Privacy #Native Messaging #privacy #surveillance
Daily CyberSecurity
The Ghost in the Browser: Is Claude Desktop Clandestinely Installing a Surveillance Bridge?
Privacy expert Alexander Hanff warns that Claude Desktop installs a "native messaging bridge" without consent, potentially bypassing browser security sandboxes.
25 views
Daily Writeups
⤷ Title: Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 04:00:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2FA bypass #Aggravated Identity Theft #Cryptocurrency Theft #Cybercrime #Department of Justice #Dundee #fbi #Scotland #SIM Swapping #SMS phishing #Tyler Robert Buchanan #Wire Fraud
Daily CyberSecurity
Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign
Tyler Buchanan pleads guilty in US court for an $8M cyber heist. Discover how SMS phishing and SIM swapping bypassed 2FA to drain corporate & crypto assets.
21 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 03:08:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Auth Bypass #CISA #cisco #cybersecurity #Kentico #KEV Catalog #PaperCut #Quest KACE #rce #TeamCity #vulnerability management #Zimbra
Daily CyberSecurity
CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra
CISA adds 8 vulnerabilities to the KEV Catalog, including Cisco, PaperCut, and Zimbra flaws. Actively exploited threats require immediate patching.
13 views
Daily Writeups
⤷ Title: CSRF Cross-Site Request Forgery: Victim Ke Browser Se Unki Marzi Ke Bina Actions Karwao!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 04:31:03 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #csrf #ethical_hacking #bug_bounty
Medium
CSRF Cross-Site Request Forgery: Victim Ke Browser Se Unki Marzi Ke Bina Actions Karwao! (Hinglish Mein)
Series: Bug Bounty Zero se Hero 🦸 | Article #19 By HackerMD | 18 min read
15 views
Daily Writeups
⤷ Title: Active Directory Lab Setup for Penetration Testing Using PowerShell
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 04:29:56 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #hacking #ctf #bug_bounty
Medium
Active Directory Lab Setup for Penetration Testing Using PowerShell
This article provides a complete walkthrough of both phases — from clicking “Create a New Virtual Machine” in VMware all the way to a fully…
7 views
Daily Writeups
⤷ Title: How a Simple POST → GET Change Exposed 26,000+ User Records (Real Bug Bounty Story)
════════════════════════
𐀪 Author: Psaibtech
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 03:16:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_security #ethical_hacking #data_privacy
Medium
🚨 How a Simple POST → GET Change Exposed 26,000+ User Records (Real Bug Bounty Story)
I didn’t hack anything. I didn’t bypass authentication. I just changed one thing — and 26,000+ users’ data was exposed.
6 views
Daily Writeups
⤷ Title: Vercel Hacked: How an AI Tool Integration Led to Unauthorized Access
════════════════════════
𐀪 Author: Vaibhav Kumar Srivastava
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 03:08:25 GMT
════════════════════════
⌗ Tags: #hacking #vercel #cybersecurity #bug_bounty #hacked
Medium
Vercel Hacked: How an AI Tool Integration Led to Unauthorized Access
Introduction
7 views