Daily Writeups
@Daily_Writeups
3.31K subscribers
1 photo
117K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.31K subscribers
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
15 views
Daily Writeups
⤷ Title: dmi⚡ XSS → Admin Takeover — From Browser Control to Full Power
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:11:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #linux #vulnerability #bug_bounty
Medium
dmi⚡ XSS → Admin Takeover — From Browser Control to Full Power
✍️ Introduction
12 views
Daily Writeups
⤷ Title: AEM Misconfiguration: How I Pulled 127MB of Internal Repository Data From a Luxury Brand — No Auth…
════════════════════════
𐀪 Author: Mallikarjun Biradar
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:51:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
AEM Misconfiguration: How I Pulled 127MB of Internal Repository Data From a Luxury Brand — No Auth…
The URL was eight characters longer than it should have been. That’s all it took.
15 views
Daily Writeups
⤷ Title: How to Build a Fully Rooted Android 14 (API 34) Emulator on Windows 11 Using rootAVD
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:45:23 GMT
════════════════════════
⌗ Tags: #root_android_app #bug_bounty #mobile_pentesting #root_android_phone #rootavd_windows_11
Medium
How to Build a Fully Rooted Android 14 (API 34) Emulator on Windows 11 Using rootAVD
Create a modern rooted Android lab for pentesting, reversing, and mobile app analysis.
13 views
Daily Writeups
⤷ Title: I Found AWS Credentials in a Public JavaScript Bundle. Here’s What That Means.
════════════════════════
𐀪 Author: Mallikarjun Biradar
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:33:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
I Found AWS Credentials in a Public JavaScript Bundle. Here’s What That Means.
The bundle was minified. The credentials weren’t.
11 views
Daily Writeups
⤷ Title: Reflected XSS in Bali Government Search Endpoint
════════════════════════
𐀪 Author: Osama Alaa
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:03:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #hacking #cybersecurity #bugs
Medium
Reflected XSS in Bali Government Search Endpoint
Summary:
16 views
Daily Writeups
⤷ Title: Support — HTB writeup
════════════════════════
𐀪 Author: Owais Khan
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:10:05 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #active_directory #security #hacking
Medium
Support — HTB writeup
It is a retired box that focuses majorly upon reverse engineering and abusing RBCD in active directory. To start our box we initiated nmap…
10 views
Daily Writeups
⤷ Title: How Hackers Actually Attack Online Games — A Cybersecurity Expert Explains
════════════════════════
𐀪 Author: Ramyaabharathi
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:04:15 GMT
════════════════════════
⌗ Tags: #infosec #claude #cybersecurity #hacking #gaming
Medium
How Hackers Actually Attack Online Games — A Cybersecurity Expert Explains
Your K/D ratio isn’t the only thing being tracked.
10 views
Daily Writeups
⤷ Title: Overthewire Room (Natas)
════════════════════════
𐀪 Author: nafay
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:54:03 GMT
════════════════════════
⌗ Tags: #overthewire_natas #hacking
Medium
Overthewire Room (Natas)
Level 0
10 views
Daily Writeups
⤷ Title: Why access-first auth matters?
════════════════════════
𐀪 Author: Anton Minin Baranovskii
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:05:25 GMT
════════════════════════
⌗ Tags: #architecture #cybersecurity #open_source #infosec #authentication
Medium
Why access-first auth matters?
In this article, I briefly explain why Toqen.app is built around an access-first authentication infrastructure.
11 views
Daily Writeups
⤷ Title: Living With the Weight of This Work
════════════════════════
𐀪 Author: Camila Santos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:59:53 GMT
════════════════════════
⌗ Tags: #vulnerability_management #ethical_hacking #cybersecurity #penetration_testing #risk_management
Medium
Living With the Weight of This Work
There is a specific kind of pressure that comes with cybersecurity work that is difficult to describe to people outside it. Every…
11 views
Daily Writeups
⤷ Title: Before the Next WannaCry
════════════════════════
𐀪 Author: Peter Kahl
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:57:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #national_security #information_security #higher_education #penetration_testing
Medium
Before the Next WannaCry
Public-Interest Digital Infrastructure and the Warnings We Still Do Not Act On
13 views
Daily Writeups
⤷ Title: Mastering Penetration Testing for Web Application Security
════════════════════════
𐀪 Author: Application Security Master
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:56:46 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_application_firewall #appsecmaster_llc
Medium
Mastering Penetration Testing for Web Application Security
Organizations across industries rely on this method to strengthen their digital defenses, improve resilience, and meet strict compliance…
12 views
Daily Writeups
⤷ Title: Top 11 Software Testing Companies
════════════════════════
𐀪 Author: Tech and Business Blog
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:54:29 GMT
════════════════════════
⌗ Tags: #software_testing #business #qa #penetration_testing
Medium
Top 11 Software Testing Companies
1. Andersen
16 views
Daily Writeups
⤷ Title: Monitoring Active Directory: TryHackMe
════════════════════════
𐀪 Author: Shubham Kumar
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:07:38 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #active_directory #tryhackme_walkthrough #splunk
Medium
Monitoring Active Directory: TryHackMe
Learn to monitor Active Directory and find anomalies in high-volume logs.
18 views
Daily Writeups
⤷ Title: How to Become an AI Ethical Hacker
════════════════════════
𐀪 Author: Cybersectoworld
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:53:58 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai_hacking
Medium
How to Become an AI Ethical Hacker
Artificial Intelligence (AI) is reshaping cybersecurity. Attackers are already using AI to automate phishing, reconnaissance, vulnerability…
18 views
Daily Writeups
⤷ Title: Red Team vs Blue Team: Understanding the Two Sides of Cyber Defense
════════════════════════
𐀪 Author: asha
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:38:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking
Medium
Red Team vs Blue Team: Understanding the Two Sides of Cyber Defense
If I’m being honest, the whole “Red Team vs Blue Team” thing made way more sense in my head before I actually started learning…
21 views
Daily Writeups
⤷ Title: What is Ethical Hacking? A Beginner’s Guide for Students
════════════════════════
𐀪 Author: Sourv
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 11:14:42 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
What is Ethical Hacking? A Beginner’s Guide for Students
Technology is a part of almost every part of our lives these days. We use the internet for work, play, and talking to each other, from…
26 views
Daily Writeups
⤷ Title: Understanding Cross-Site Scripting (XSS): Reflected vs Stored Attacks in Modern Web Applications
════════════════════════
𐀪 Author: Dharani Priya S
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:21:00 GMT
════════════════════════
⌗ Tags: #xs #xss_vulnerability #reflected_xss #stored_xss
Medium
Understanding Cross-Site Scripting (XSS): Reflected vs Stored Attacks in Modern Web Applications
Introduction
34 views
Daily Writeups
⤷ Title: TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:58:55 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Malware #Bitwarden #Cyber Attack #Cybersecurity #Developer #NPM #Password manager #TeamPCP
Hackread
TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.
24 views
Daily Writeups
⤷ Title: Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:45:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Academic Security #COS Server #CVE_2026_5756 #Data Theft #DRC INSIGHT #EduTech #Exam Proctoring #infosec #network_security #no patch #Student Privacy
Daily CyberSecurity
Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
Unpatched CVE-2026-5756 in DRC INSIGHT allows unauthenticated hijacking of student exam responses and traffic manipulation. Secure your school's network now.
17 views