Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Exploiting the Infamous vsftpd 2.3.4 Backdoor: A Metasploitable 2 Walkthrough
════════════════════════
𐀪 Author: Ebube uzomba
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 20:41:54 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #pentesting #metasploit
Medium
Exploiting the Infamous vsftpd 2.3.4 Backdoor: A Metasploitable 2 Walkthrough
The vsftpd 2.3.4 backdoor is a classic “supply chain” disaster. Back in 2011, the source code was compromised to include a listener on port…
21 views
Daily Writeups
⤷ Title: How MSSPs Can Cut Security Costs Using DentiGrid
════════════════════════
𐀪 Author: Sam Walker
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 20:16:34 GMT
════════════════════════
⌗ Tags: #threat_intelligence #mssp #infosec #cybersecurity
Medium
How MSSPs Can Cut Security Costs Using DentiGrid
In most cybersecurity conversations, we focus heavily on threats, tools and detection rates.
16 views
Daily Writeups
⤷ Title: I Got Phished. So I Investigated the Attacker Instead.
════════════════════════
𐀪 Author: Fino :)
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 20:10:08 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #phishing #infosec #email_security #cybersecurity
Medium
I Got Phished. So I Investigated the Attacker Instead.
It was an ordinary Thursday.
19 views
Daily Writeups
⤷ Title: Network Enumeration Report (SMB, SMTP, SNMP, Metasploit)
════════════════════════
𐀪 Author: Youssef Ashraf
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 19:23:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #smtp #smb #snmp #ethical_hacking
Medium
Network Enumeration Report (SMB, SMTP, SNMP, Metasploit)
Enumeration is a critical phase in penetration testing where attackers actively gather detailed information from target systems. This phase…
25 views
Daily Writeups
⤷ Title: AI Security Path- TryHackMe- Module 2(Part 2)
════════════════════════
𐀪 Author: Swarupa Jeedimetla
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 20:51:52 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #ai #ai_security
Medium
AI Security Path- TryHackMe- Module 2(Part 2)
Behind the Model: Why AI Reconnaissance Defines Today’s Security Landscape
22 views
Daily Writeups
⤷ Title: TryHackMe — RootMe CTF Solution
════════════════════════
𐀪 Author: Efe Özel
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 19:35:10 GMT
════════════════════════
⌗ Tags: #pentesting #tryhackme_walkthrough #ctf_writeup #tryhackme #cybersecurity
Medium
TryHackMe — RootMe CTF Solution
Summary: In RootMe CTF room we need to find web vulnerabilities and then we use reverse shell connect to terminal after than privelege…
45 views
Daily Writeups
⤷ Title: WebVersePro Labs — Challenge: Fermata Writeup (Reflected XSS)
════════════════════════
𐀪 Author: Zor0ark
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 21:04:10 GMT
════════════════════════
⌗ Tags: #webverse #web_pentesting #bug_bounty #xs #ctf
Medium
WebVersePro Labs — Challenge: Fermata Writeup (Reflected XSS)
OBJECTIVE: To identify the injection point, break out of an HTML comment block, and execute arbitrary JavaScript to retrieve the challenge…
37 views
Daily Writeups
⤷ Title: Full System Compromise via Chained API Vulnerabilities - OpenVault Bank
════════════════════════
𐀪 Author: Aishat Olayinka Yusuf
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 20:53:31 GMT
════════════════════════
⌗ Tags: #application_security #api #web_app_security
Medium
Full System Compromise via Chained API Vulnerabilities - OpenVault Bank
APIs are at the core of modern applications, especially in systems like banking where data needs to move quickly and securely between…
30 views
Daily Writeups
⤷ Title: TryHackMe — Enterprise: Writeup
════════════════════════
𐀪 Author: Taher Borgi
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 22:55:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #penetration_testing #active_directory #ethical_hacking
Medium
TryHackMe — Enterprise: Writeup
Room: Enterprise Difficulty: Hard Operating System: Windows Made by: @tryhackme
27 views
Daily Writeups
⤷ Title: TryHackMe SOC Analyst Road Map Part-27
════════════════════════
𐀪 Author: safa kaya
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 21:37:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme
Medium
TryHackMe SOC Analyst Road Map Part-27
JR PENETRATION TESTER-
-INTRODUCTION TO PENTESTING —
-PENTESTING FUNDAMENTALS-
Task 1 — What is Penetration Testing
Etik hackerlık…
24 views
Daily Writeups
⤷ Title: Guía Maestra de SSRF: Estrategias de Explotación y Mitigación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 00:01:04 GMT
════════════════════════
⌗ Tags: #web_development #technology #hacking #cybersecurity #bug_bounty
Medium
Guía Maestra de SSRF: Estrategias de Explotación y Mitigación
Aprende a detectar y explotar vulnerabilidades SSRF en entornos Cloud-Native, desde servicios de metadata hasta evasión de filtros.
22 views
Daily Writeups
⤷ Title: Day 10: Bypassing SameSite Lax with Method Override (CSRF Lab Walkthrough)
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 23:45:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty_tips #cybersecurity #bug_bounty_writeup #bug_bounty
Medium
Day 10: Bypassing SameSite Lax with Method Override (CSRF Lab Walkthrough)
hello everyone, this is nobody.
17 views
Daily Writeups
⤷ Title: Race Condition Allows Users to Obtain More Than 1 Free Domain
════════════════════════
𐀪 Author: rozzen
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 23:12:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #vulnerability
Medium
Race Condition Allows Users to Obtain More Than 1 Free Domain
Disclaimer: This is a report from someone else that I am studying, not my own finding. (Source: Automattic | Report #2616045 — Race…
19 views
Daily Writeups
⤷ Title: What a TryHackMe Live Session Taught Me About AI, Cybersecurity, and the Skills That Will Matter…
════════════════════════
𐀪 Author: Mansi Mahamuni
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 00:47:06 GMT
════════════════════════
⌗ Tags: #ai_in_cybersecurity #agentic_ai #cybersecurity #tryhackme
Medium
What a TryHackMe Live Session Taught Me About AI, Cybersecurity, and the Skills That Will Matter…
I attended a live session today hosted by TryHackMe Co-Founder Ashu Savani and Eva Benn, and it left me thinking about something that many…
23 views
Daily Writeups
⤷ Title: HackTheBox — Logging
════════════════════════
𐀪 Author: sn0x
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 23:15:47 GMT
════════════════════════
⌗ Tags: #hackthebox #htb #htb_writeup #ctf #hackthebox_writeup
Medium
HackTheBox — Logging
Authorized lab environment. Educational purposes only.
33 views
Daily Writeups
⤷ Title: Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:31:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA Warning #CVE_2025_65856 #IoT security #IP Camera Security #no patch #ONVIF Vulnerability #PoC Exploit #Xiongmai #XM530
Daily CyberSecurity
Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw
Critical 9.8 CVSS auth bypass hits Xiongmai IP cameras. Public PoC is live with NO patch available. Secure your live feeds and isolate your devices now!
32 views
Daily Writeups
⤷ Title: Operational Blackout: How Kyber Ransomware Targets the Heart of Virtualized Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:00:08 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #data recovery #Hyper_V #infosec #Kyber Ransomware #Rapid7 #Rust malware #Virtualization Attack #VMware ESXi #VSS Wipe #Windows Security
Daily CyberSecurity
Operational Blackout: How Kyber Ransomware Targets the Heart of Virtualized Environments
Researchers at Rapid7 have uncovered Kyber, a specialized ransomware family that recently hit enterprise environments with a coordinated, dual-platform attack. Unlike common strains that focus on …
27 views
Daily Writeups
⤷ Title: Supply Chain Sabotage: Bitwarden CLI Compromised in Global “Checkmarx” Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:41:43 +0000
════════════════════════
⌗ Tags: #Malware #Bitwarden #Bitwarden CLI #bw1.js #Checkmarx Campaign #cybersecurity #Dune Malware #GitHub Actions #infosec #malware #secret management #supply chain attack
Daily CyberSecurity
Supply Chain Sabotage: Bitwarden CLI Compromised in Global "Checkmarx" Campaign
Bitwarden CLI v2026.4.0 compromised in "Dune"-themed supply chain attack. Malware steals cloud secrets and SSH keys. Rotate your credentials immediately.
21 views
Daily Writeups
⤷ Title: Arcane Door Reopened: The Cisco Firepower Backdoor That Only a Hard Reboot Can Kill
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:28:24 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #Arcane Door #ASA #backdoor #cisco #Cisco Talos #CVE_2025_20333 #cyber_espionage #FIREPOWER #FIRESTARTER #FTD #infosec #LINA Process #UAT_4356
Daily CyberSecurity
Arcane Door Reopened: The Cisco Firepower Backdoor That Only a Hard Reboot Can Kill
Cisco Talos uncovers the FIRESTARTER backdoor in Arcane Door's latest attack on Firepower devices. Patch CVE-2025-20333 now to stop state-sponsored espionage.
18 views
Daily Writeups
⤷ Title: Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:08:40 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Carbon Black #cyber_espionage #GoGra #Harvester #infosec #Linux Backdoor #Malware Analysis #Microsoft Graph API #South Asia Security #Symantec
Daily CyberSecurity
Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
Harvester APT expands to Linux using Microsoft Graph API for C2. Learn how the "GoGra" variant uses Outlook and "Zomato Pizza" lures to evade detection.
16 views
Daily Writeups
⤷ Title: Bug Bounty Series— Part 1 (Bug Bounty Basics)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:01:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty #hacking
Medium
Bug Bounty Series— Part 1 (Bug Bounty Basics)
Inside: A deep dive into the lessons learned and techniques applied during my latest hands-on experiments.
21 views