Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: SOC127 — SQL Injection Detected — Web Attack (EventID:235) Investigation
════════════════════════
𐀪 Author: Tamerlan Shabanov
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 17:26:46 GMT
════════════════════════
⌗ Tags: #sql_injection #soc #cybersecurity #blue_team #lets_defend
Medium
SOC127 — SQL Injection Detected — Web Attack (EventID:235) Investigation
Platform: LetsDefend
29 views
Daily Writeups
⤷ Title: Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 23:49:00 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: Decoding Q1 2026’s $152.9 Billion Crypto Custody Concentration
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:53:39 +0000
════════════════════════
⌗ Tags: #Crypto #Fintech #Binance #Cryptocurrency #Technology
Hackread
Decoding Q1 2026’s $152.9 Billion Crypto Custody Concentration
Crypto Custody Concentration hits $152.9B as institutions shift to derivatives, consolidating capital on top exchanges amid Q1 market slowdown.
20 views
Daily Writeups
⤷ Title: Building a Windows File System Minifilter Driver: Intercepting File Access
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:57:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #hacking #pentesting #malware
Medium
Building a Windows File System Minifilter Driver: Intercepting File Access
Welcome to this new Medium post. In this article, I’ll walk you through the implementation of a basic Windows File System Minifilter Driver…
13 views
Daily Writeups
⤷ Title: How Reasoning Hacked the Boxes!
════════════════════════
𐀪 Author: N88B
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:42:00 GMT
════════════════════════
⌗ Tags: #hacking #agents #ai #software_development #security
Medium
How Reasoning Hacked the Boxes!
Recently, a friend introduced me to security challenges from Hack The Box platform/community. The idea is simple and powerful: you learn…
13 views
Daily Writeups
⤷ Title: The Cybersecurity — Career Accelerator (April 2026)
════════════════════════
𐀪 Author: Franklin Rhodes
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:04:14 GMT
════════════════════════
⌗ Tags: #careers #cybersecurity #hacking #infosec #mcafee_antivirus
Medium
The Cybersecurity — Career Accelerator (April 2026)
Colleagues, our goal is to provide Cybersecurity professionals with actionable information to advance your career and income growth: Market…
17 views
Daily Writeups
⤷ Title: TAMECAT: Iranian APT42 Group New PowerShell Backdoor Targeting Military and Government Officials
════════════════════════
𐀪 Author: Excalibra
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 19:44:12 GMT
════════════════════════
⌗ Tags: #powershell #malware #hacking #cybersecurity
Medium
TAMECAT: APT42’s New PowerShell Backdoor Targeting Military and Government Officials
The Iranian APT42 group is conducting espionage attacks against high-ranking military and government officials using the TAMECAT…
17 views
Daily Writeups
⤷ Title: Unauthenticated SSRF via /api/cors on Multiple Subdomains
════════════════════════
𐀪 Author: Bex01
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 19:11:29 GMT
════════════════════════
⌗ Tags: #infosec
Medium
Unauthenticated SSRF via /api/cors on Multiple Subdomains
السلام عليكم ورحمة الله وبركاته
11 views
Daily Writeups
⤷ Title: Network Services — THM
════════════════════════
𐀪 Author: Fadybasem - ( SilentN0va )
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:16:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #network_security #ethical_hacking #technology
Medium
Network Services — THM
الفرق بين “اختراق الشبكات” و”اختراق الواي فاي”
12 views
Daily Writeups
⤷ Title: Tryhackme room Blue كيف تحل لاب ويندوز 7 ؟
════════════════════════
𐀪 Author: Moahmmed
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 19:45:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #tryhackme #ethical_hacking
Medium
Tryhackme room Blue كيف تحل لاب ويندوز 7 ؟
شرح عملي لحل لاب Blue في TryHackMe، بداية من مرحلة جمع المعلومات وحتى استغلال الثغرة ورفع الصلاحيات.
13 views
Daily Writeups
⤷ Title: A Quick Win: From WebDAV to Root
════════════════════════
𐀪 Author: NullxCipher
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:11:43 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #php_reverse_shell #tryhackme #thm_writeup #webdav
Medium
A Quick Win: From WebDAV to Root
I started with a simple target:
17 views
Daily Writeups
⤷ Title: Elastic Stack: The Basics — TryHackMe Writeup
════════════════════════
𐀪 Author: Hitesh kumar
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 19:13:41 GMT
════════════════════════
⌗ Tags: #dfir #tryhackme_walkthrough #elasticsearch #tryhackme #elk
Medium
Elastic Stack: The Basics — TryHackMe Writeup
Hello everyone so today i will be writing about Elastic stack: the Basics room (answers will be provided in the screenshorts)
26 views
Daily Writeups
⤷ Title: イスラエルPillar SecurityがGoogle Antigravityの脆弱性を報告 (2026年4月29日公開)
════════════════════════
𐀪 Author: Eiji Sasahara (笹原英司), Ph.D., MBA
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 20:01:01 GMT
════════════════════════
⌗ Tags: #prompt_injection #google_antigravity #pillar_security #rce_vulnerability
Medium
イスラエルPillar SecurityがGoogle Antigravityの脆弱性を報告 (2026年4月29日公開)
2026年4月20日、イスラエル・テルアビブのAIセキュリティ専門企業 ピラーセキュリティ(Pillar Security)は、「Antigravityにおけるプロンプトインジェクションに起因したRCEとサンドボックス脱出」と題する記事を公開した。
33 views
Daily Writeups
⤷ Title: New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 21:33:11 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #DHL #Forcepoint #Fraud #Password #Phishing #Scam
Hackread
New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry.
22 views
Daily Writeups
⤷ Title: Escaping the Sandbox: Client-Side Template Injection (CSTI) via Outdated AngularJS
════════════════════════
𐀪 Author: Mustafa
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 22:44:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
Escaping the Sandbox: Client-Side Template Injection (CSTI) via Outdated AngularJS
Introduction
22 views
Daily Writeups
⤷ Title: Bypassing 4-Digit MFA — A HackSmarter Lab Writeup
════════════════════════
𐀪 Author: Cyberologist
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 21:32:56 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #cybersecurity #bug_bounty #penetration_testing
Medium
Bypassing 4-Digit MFA — A HackSmarter Lab Writeup
Platform: HackSmarter Challenge: Bypass MFA Difficulty: Beginner Tools Used: Burp Suite Community Edition, OpenVPN
20 views
Daily Writeups
⤷ Title: Prototype Pollution
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 21:23:12 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #information_security #bug_bounty #javascript #cybersecurity
Medium
Prototype Pollution
Turning Property Lookups into Code Execution
18 views
Daily Writeups
⤷ Title: COMMON HTTP ERROR CODES & Bypass Techniques
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 21:01:19 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bypass #http_status_code #bug_bounty_tips #bug_bounty
Medium
🎓 COMMON HTTP ERROR CODES & Bypass Techniques 🎓
HTTP error codes are not just roadblocks — they’re clues. Understanding what each code means and how to bypass them is essential for web…
20 views
Daily Writeups
⤷ Title: The Identity That Dies With the Session
════════════════════════
𐀪 Author: Seven Cubed Seven Labs
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 21:24:48 GMT
════════════════════════
⌗ Tags: #identity_management #cybersecurity #passwordless #infosec #authentication
Medium
The Identity That Dies With the Session
Why Every Credential Breach Shared the Same Structural Flaw — And What Identity Architecture Replaces It
31 views
Daily Writeups
⤷ Title: ClickUp Discloses Exposure of Customer Emails and API Token
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 00:08:43 +0000
════════════════════════
⌗ Tags: #Data Leak #2026 #API security #ClickUp #Configuration Error #cybersecurity #Data Breach #Feature Flags #HackerOne #infosec #leak #PII Exposure #Split.io
Daily CyberSecurity
ClickUp Discloses Exposure of Customer Emails and API Token
ClickUp discloses a configuration flaw exposing 893 emails and a live API token via Split.io feature flags. Learn how client-side SDKs became a public leak.
15 views
Daily Writeups
⤷ Title: Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 23:57:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Reverse Engineering #Backend Security #CVE_2026_3854 #GHES #git #github #infosec #rce #Remote Code Execution #Vulnerability #Wiz Research #X_Stat Header
Daily CyberSecurity
Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)
Wiz Research reveals CVE-2026-3854, a critical GitHub RCE. One git push could expose millions of repos. GHES users must patch to v3.19.3 immediately.
11 views