Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Analisis Kerentanan Cross-Site Scripting (XSS) pada Form Input Web dan Dampaknya terhadap Keamanan…
════════════════════════
𐀪 Author: Gansnabil
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:53:48 GMT
════════════════════════
⌗ Tags: #web_security #php #xs #input_validation
Medium
Analisis Kerentanan Cross-Site Scripting (XSS) pada Form Input Web dan Dampaknya terhadap Keamanan Data Pengguna
Abstrak
15 views
Daily Writeups
⤷ Title: Kenapa pengguna X bermigrasi ke Threads
════════════════════════
𐀪 Author: Sulthan Al Aziz
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:36:28 GMT
════════════════════════
⌗ Tags: #social_media #xs #threads
Medium
Kenapa pengguna X bermigrasi ke Threads
Saya mau nulis ini karena ini merupakan keresahan saya bermain sosial media di X dan Threads. Opini yang saya tulis di bawah ini menurut…
16 views
Daily Writeups
⤷ Title: Eksperimen Sederhana Cross-Site Scripting (XSS) di PHP: Kenapa Form Input Bisa Berbahaya?
════════════════════════
𐀪 Author: Anggrianihermawan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:06:47 GMT
════════════════════════
⌗ Tags: #programming #web_security #xs #cybersecurity #php
Medium
Eksperimen Sederhana Cross-Site Scripting (XSS) di PHP: Kenapa Form Input Bisa Berbahaya?
Pendahuluan
20 views
Daily Writeups
⤷ Title: ️ Mencoba SQL Injection Secara Langsung: Dari Gagal Login Sampai Bisa Masuk Tanpa Password
════════════════════════
𐀪 Author: Dhaninaufalhabibie
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:44:57 GMT
════════════════════════
⌗ Tags: #sql_injection #web_login
Medium
🛡️ Mencoba SQL Injection Secara Langsung: Dari Gagal Login Sampai Bisa Masuk Tanpa Password
Eksperimen sederhana yang membuka mata saya tentang betapa rentannya sistem login jika tidak diamankan dengan benar.
27 views
Daily Writeups
⤷ Title: SQL Injection pada Website: Cara Kerja dan Pencegahannya
════════════════════════
𐀪 Author: Hafizabdurohman
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:30:43 GMT
════════════════════════
⌗ Tags: #php #web_securyt #mysql #database #sql_injection
Medium
SQL Injection pada Website: Cara Kerja dan Pencegahannya
Pendahuluan
29 views
Daily Writeups
⤷ Title: aerleon: Generate firewall configs for multiple firewall platforms
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:39:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #aerleon #firewall platforms
Information Security News
aerleon: Generate firewall configs for multiple firewall platforms - Information Security News
Generate firewall configs for multiple firewall platforms from a single platform-agnostic configuration language through a command line tool and Python API.
23 views
Daily Writeups
⤷ Title: Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:37:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Security 2026 #Function 0x03 #ICS Exploitation #Industrial Control Systems #Manufacturing Security #Modbus #OT Security #PLC
Penetration Testing Tools
Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers
Researchers have unearthed a pervasive offensive targeting industrial controllers that had been inadvertently exposed to the public internet.
16 views
Daily Writeups
⤷ Title: The End of Forced Reboots: Microsoft Grants Windows 11 Users Indefinite Update Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:35:15 +0000
════════════════════════
⌗ Tags: #Windows #Build 26300.8289 #Microsoft Insider #Operating Systems #PC Maintenance #Secure Future Initiative #Tech News 2026 #User Experience #Windows 11 #Windows 11 26H2 #Windows Update
Penetration Testing Tools
The End of Forced Reboots: Microsoft Grants Windows 11 Users Indefinite Update Control
Microsoft has resolved to render Windows updates significantly less intrusive, empowering users to defer installations with greater frequency,
13 views
Daily Writeups
⤷ Title: Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:30:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arctic Wolf #BlueNoroff #ClickFix #crypto security #Deepfakes #DPRK #infosec #Lazarus Group #powershell #social engineering #Web3 #Zoom Typo_squatting
Daily CyberSecurity
Inside BlueNoroff’s "Self-Reinforcing" Deepfake Meeting Trap
BlueNoroff uses a "self-reinforcing" deepfake pipeline to target crypto CEOs. Fake Zoom meetings and stolen footage lead to a 5-minute system compromise.
14 views
Daily Writeups
⤷ Title: The .gov Illusion: Inside the 16,800-Domain “Operation Trust Trap” Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:01:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alibaba Cloud #APT36 #Cyber Intelligence #Cyble #dns #Gov Security #infosec #Operation Trust Trap #phishing #Subdomain Injection #Tencent Cloud #Transparent Tribe
Daily CyberSecurity
The .gov Illusion: Inside the 16,800-Domain "Operation Trust Trap" Campaign
Cyble uncovers "Operation Trust Trap," a 16,800-domain network weaponizing *.gov trust to steal credentials. See how APT36 and others hijack the human eye.
10 views
Daily Writeups
⤷ Title: The End of Unlimited AI: GitHub Copilot Shifts to “Pay-as-You-Go” Credits to Power the Agentic Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:08:17 +0000
════════════════════════
⌗ Tags: #Technology #2026 Tech News #AI Agents #AI Credits #Claude 3.7 Opus #DevTools #FinTech #GitHub Copilot #GitHub Enterprise #software development #Token Throughput #Usage_Based Billing
Daily CyberSecurity
The End of Unlimited AI: GitHub Copilot Shifts to "Pay-as-You-Go" Credits to Power the Agentic Era
Effective June 1, 2026, GitHub Copilot transitions to usage-based billing. Learn how AI credits, token throughput, and model multipliers will impact your workflow.
20 views
Daily Writeups
⤷ Title: Inside the Stealthy Evolution of Vidar Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:06:31 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Crypto theft #cybersecurity #Fileless Malware #infosec #Infostealer #living_off_the_land #malware #social engineering #Telegram C2 #Vidar
Daily CyberSecurity
Inside the Stealthy Evolution of Vidar Infostealer
Vidar infostealer evolves into a fileless 2026 threat. From fake CAPTCHAs to "Claude Code" leaks, see how it steals crypto and passwords via Telegram C2.
16 views
Daily Writeups
⤷ Title: China Blocks Meta’s $2B Acquisition of Manus AI in Landmark Security Move
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:03:59 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #Benchmark #Butterfly Effect #china #Foreign Investment Security Review #Ji Yichao #M&A #Manus AI #Meta #NDRC #singapore #Tech Sovereignty #Xiao Hong
Daily CyberSecurity
China Blocks Meta’s $2B Acquisition of Manus AI in Landmark Security Move
China's NDRC halts Meta’s $2B acquisition of Manus AI. Despite relocating to Singapore, the "agentic" startup faces the first-ever forced unwinding of a foreign AI deal.
11 views
Daily Writeups
⤷ Title: Abused an MCP Server to Perform Lateral Movement | Critical Finding | MCP Testing Methodology
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:36 GMT
════════════════════════
⌗ Tags: #mcp_security #penetration_testing #bug_bounty #ai_security #hackerone
Medium
SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
Hi everyone, in this article, I’ll talk about one of my recent assessments which invoked an MCP component.
16 views
Daily Writeups
⤷ Title: I Changed One Number… and Got Access to Citizens’ ID and Address Proofs
════════════════════════
𐀪 Author: VoidSec24
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:35 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #ethical_hacking
Medium
I Changed One Number… and Got Access to Citizens’ ID and Address Proofs
How a simple parameter manipulation exposed highly sensitive government records
10 views
Daily Writeups
⤷ Title: Android Lockdown — Thinking Like an Operator (Part 5)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:54:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #android #privacy #bug_bounty #technology
Medium
🧠 Android Lockdown — Thinking Like an Operator (Part 5)
Bypass Mindset > Tools
8 views
Daily Writeups
⤷ Title: What Actually Gets Sold on the Dark Web? (Reality vs Hype)
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:41:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #artificial_intelligence #programming
Medium
What Actually Gets Sold on the Dark Web? (Reality vs Hype)
The phrase “Dark Web” instantly triggers images of hitmen-for-hire, secret auctions, and a digital underworld straight out of a movie. But…
7 views
Daily Writeups
⤷ Title: LLM Prompt Injection in an AI Support Chatbot — How I Extracted an Entire Internal Knowledge Base…
════════════════════════
𐀪 Author: Krithick
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:21:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #chatbots #ai_security #web_llm_attacks
Medium
LLM Prompt Injection in an AI Support Chatbot — How I Extracted an Entire Internal Knowledge Base Using Plain English
No exploit code. No SQL injection. No CVEs. Just carefully worded sentences — and a chatbot that told me everything.
12 views
Daily Writeups
⤷ Title: He Changed One Number in an Instagram Request — Instagram Paid Him $6,500
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:33:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #artificial_intelligence #programming #bug_bounty
Medium
He Changed One Number in an Instagram Request — Instagram Paid Him $6,500
Quick note — I built HackThrough . It turns real bug bounty writeups into interactive step-by-step challenges. This bug is on there. Go…
11 views
Daily Writeups
⤷ Title: Application Security Testing (AST) Market Analysis and Future Outlook
════════════════════════
𐀪 Author: Gauri Kale
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:06:40 GMT
════════════════════════
⌗ Tags: #security #api #application_security #information_security #information_technology
Medium
Application Security Testing (AST) Market Analysis and Future Outlook
In today’s digital era, software applications are the backbone of business operations, customer interactions, and critical data management…
8 views
Daily Writeups
⤷ Title: The Invisible Skeleton: 10 Hacking Truths That Prove Your “Privacy” is Just a Ghost
════════════════════════
𐀪 Author: Mohit
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:02:02 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #hacking_facts #hacking_reality #cyber_security_awareness
Medium
The Invisible Skeleton: 10 Hacking Truths That Prove Your “Privacy” is Just a Ghost
I spent last night in a digital “dead zone” — a room shielded by copper mesh where the air feels heavy and the wifi goes to die. There is a…
11 views