Daily Writeups
@Daily_Writeups
3.31K subscribers
1 photo
117K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.31K subscribers
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #35: SSRF — Turning the Server Into Your Personal Proxy to Hack Internal…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:07:15 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #bug_bounty #cybersecurity #technology
Medium
“Bug Bounty Bootcamp #35: SSRF — Turning the Server Into Your Personal Proxy to Hack Internal Networks”
Imagine if you could trick a web server into visiting internal websites, reading local files, and even scanning private IP ranges on your…
11 views
Daily Writeups
⤷ Title: How a Newline Injection in Folder Names Broke Access Revocation: 750$ Bug
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:04:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #injection #infosec #cybersecurity
Medium
How a Newline Injection in Folder Names Broke Access Revocation: 750$ Bug
Sometimes the smallest input validation issues can snowball into serious business logic flaws. This bug is a great example — a simple…
10 views
Daily Writeups
⤷ Title: Wapiti Deep Dive | Web App Security Testing Tool
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:05:46 GMT
════════════════════════
⌗ Tags: #web3 #writing #hacking #cybersecurity #web_development
Medium
Wapiti Deep Dive | Web App Security Testing Tool
Web Application Security Testing Tool Explained
9 views
Daily Writeups
⤷ Title: Mythos and the cyberhacking panic — what this means for crypto
════════════════════════
𐀪 Author: Steven Boykey Sidley
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:10:45 GMT
════════════════════════
⌗ Tags: #claude_mythos #cybersecurity #hacking #cryptocurrency
Medium
Mythos and the cyberhacking panic — what this means for crypto
(Image: via Currrency News)
11 views
Daily Writeups
⤷ Title: Active Directory Pentest Lab Report — SOUPEDECODE.LOCAL
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:04:13 GMT
════════════════════════
⌗ Tags: #information_security #red_team #ethical_hacking #cybersecurity #hacking
Medium
Active Directory Pentest Lab Report — SOUPEDECODE.LOCAL
Author: Vijay Ishan Chowdhury Organization: ZeroDay Security Services Lab Type: Active Directory Exploitation (Red Team Simulation)
12 views
Daily Writeups
⤷ Title: The Shadow Chain (Part II): PowerShell, SSL/TLS, and the Art of Bypassing Corporate Firewalls
════════════════════════
𐀪 Author: Frank Mccausland
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:11:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #powershell #blue_team #infosec #red_team
Medium
The Shadow Chain (Part II): PowerShell, SSL/TLS, and the Art of Bypassing Corporate Firewalls
Introduction
17 views
Daily Writeups
⤷ Title: Spring — Spring Boot Actuator RCE + Symlink Arbitrary Write to Root | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:04:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #penetration_testing #pentesting #ethical_hacking
Medium
Spring — Spring Boot Actuator RCE + Symlink Arbitrary Write to Root | TryHackMe
This machine presents a deliberately misconfigured Spring Boot application sitting behind HTTPS on port 443. The attack surface opened…
11 views
Daily Writeups
⤷ Title: Is Penetration Testing Becoming a Complex Process
════════════════════════
𐀪 Author: Reema K.R
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:53:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #penetration_testing #software_testing #software_development
Medium
Is Penetration Testing Becoming a Complex Process
Penetration testing, often called pentesting, is a part of modern cybersecurity. It has helped organisations identify vulnerabilities…
14 views
Daily Writeups
⤷ Title: AI Forensics | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:33:03 GMT
════════════════════════
⌗ Tags: #tryhackme #programming #cybersecurity #tryhackme_walkthrough #technology
Medium
AI Forensics | TryHackMe
Task 1 Introduction:
12 views
Daily Writeups
⤷ Title: AI/ML Security Threats | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:14:37 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #tryhackme #programming #tryhackme_walkthrough
Medium
AI/ML Security Threats | TryHackMe
Task 1 Introduction:
12 views
Daily Writeups
⤷ Title: OSINT REHBERİ: Sadece Bir Kullanıcı Adıyla Seni Takip Ettim
════════════════════════
𐀪 Author: CASSANDRA
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:35:46 GMT
════════════════════════
⌗ Tags: #osint_tool #cassandra #tryhackme
Medium
OSINT REHBERİ: Sadece Bir Kullanıcı Adıyla Seni Takip Ettim
Herkese Merhaba! Bugün sizinle bir “dijital ayak izini” takip edeceğiz. Değerli üyemiz İrem Kılıçer’in yazısını sizlerle paylaşıyoruz. Peki…
16 views
Daily Writeups
⤷ Title: Evil-GPT | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #ai #llm #ctf #ctf_writeup #tryhackme
Medium
Evil-GPT | TryHackMe Write-up
Hello everyone, today we’ll solve the Evil GPT room where a rogue AI has taken control of a system and is using a natural language…
15 views
Daily Writeups
⤷ Title: TryHackMe (THM) Blue Walkthrough + Answer
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:10:38 GMT
════════════════════════
⌗ Tags: #eternalblue #tryhackme_walkthrough #tryhackme
Medium
TryHackMe (THM) Blue Walkthrough + Answer
🔗Room Link : https://tryhackme.com/room/blue
26 views
Daily Writeups
⤷ Title: Attack Campaign: Tunisian Gov Database Breached,French Healthcare Data Stolen
════════════════════════
𐀪 Author: PhatomCandle
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:35:43 GMT
════════════════════════
⌗ Tags: #threat_intelligence #apt #sql_injection #cybersecurity
Medium
Attack Campaign: Tunisian Gov Database Breached,French Healthcare Data Stolen
Attacker's server reveals SQLi breaches of Tunisian gov databases and theft of many French patient records in a suspected APT campaign
35 views
Daily Writeups
⤷ Title: Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 17:19:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: 26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 17:18:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
25 views
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
15 views
Daily Writeups
⤷ Title: dmi⚡ XSS → Admin Takeover — From Browser Control to Full Power
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:11:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #linux #vulnerability #bug_bounty
Medium
dmi⚡ XSS → Admin Takeover — From Browser Control to Full Power
✍️ Introduction
12 views
Daily Writeups
⤷ Title: AEM Misconfiguration: How I Pulled 127MB of Internal Repository Data From a Luxury Brand — No Auth…
════════════════════════
𐀪 Author: Mallikarjun Biradar
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:51:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
AEM Misconfiguration: How I Pulled 127MB of Internal Repository Data From a Luxury Brand — No Auth…
The URL was eight characters longer than it should have been. That’s all it took.
15 views
Daily Writeups
⤷ Title: How to Build a Fully Rooted Android 14 (API 34) Emulator on Windows 11 Using rootAVD
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:45:23 GMT
════════════════════════
⌗ Tags: #root_android_app #bug_bounty #mobile_pentesting #root_android_phone #rootavd_windows_11
Medium
How to Build a Fully Rooted Android 14 (API 34) Emulator on Windows 11 Using rootAVD
Create a modern rooted Android lab for pentesting, reversing, and mobile app analysis.
13 views