Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Your Wi-Fi Is Probably Insecure. Here’s How I Know — And How to Fix It in 10 Minutes.
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 09:10:29 GMT
════════════════════════
⌗ Tags: #hacking #security #technology #cybersecurity #wifihacking
Medium
Your Wi-Fi Is Probably Insecure. Here’s How I Know — And How to Fix It in 10 Minutes.
I tested my neighbour’s router (with permission). The results were uncomfortable….neighbour gave written permission. this is ethical. we…
13 views
Daily Writeups
⤷ Title: ItsyBitsy: Hunting a C2 Beacon with Elastic SIEM
════════════════════════
𐀪 Author: Enryuuu
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 10:25:11 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #ctf_writeup #ctf #cybersecurity
Medium
ItsyBitsy: Hunting a C2 Beacon with Elastic SIEM
Introduction
20 views
Daily Writeups
⤷ Title: The Loud Failure: How a Broken WebSocket Leaked a Master Key to the Backend
════════════════════════
𐀪 Author: DeepCodeX
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 09:56:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #cybersecurity #information_security #penetration_testing
Medium
The Loud Failure: How a Broken WebSocket Leaked a Master Key to the Backend
In bug bounty hunting, we often spend a lot of time looking for complex injection flaws or deep architectural logic errors. But sometimes…
19 views
Daily Writeups
⤷ Title: MidGarden2 (HackSmarter Writeup) — Chaining ACLs and BadSuccessor to Domain Admin
════════════════════════
𐀪 Author: Alejandro Perez
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 09:23:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #cybersecurity #ctf_writeup
Medium
MidGarden2 (HackSmarter Writeup) — Chaining ACLs and BadSuccessor to Domain Admin
This writeup is part of a series focused on Active Directory penetration testing from one of my favorite platforms, HackSmarter, which…
21 views
Daily Writeups
⤷ Title: DarkZero Walkthrough (Unintended path)
════════════════════════
𐀪 Author: Xotourlif33
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 09:28:18 GMT
════════════════════════
⌗ Tags: #token_theft #darkzero #hackthebox #hackthebox_writeup
Medium
DarkZero Walkthrough (Unintended path)
DarkZero is a hard-difficulty Windows machine designed around an assumed breach scenario in which the attacker is provided with…
31 views
Daily Writeups
⤷ Title: Cross-Site Scripting (XSS): Ancaman Tersembunyi di Balik Halaman Web
════════════════════════
𐀪 Author: Yansya
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 10:21:22 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #xs #web_security
Medium
Cross-Site Scripting (XSS): Ancaman Tersembunyi di Balik Halaman Web
Eksperimen Langsung Memahami Serangan XSS dan Cara Mencegahnya
40 views
Daily Writeups
⤷ Title: What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 17:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: Brinker Introduces a Novel Approach to Deepfake Detection
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:45:21 +0000
════════════════════════
⌗ Tags: #Press Release #CISO #Monitoring #Product Launch
Hackread
Brinker Introduces a Novel Approach to Deepfake Detection
WILMINGTON, Delaware, 29th April 2026, CyberNewswire
27 views
Daily Writeups
⤷ Title: US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:19:54 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Data Breaches #Chicago #Cyber Attack #Cybersecurity #Estonia #Peter Stokes #Scattered Spider #Social Engineering #USA
Hackread
US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks
US-Estonian suspect Peter Stokes arrested in Finland over alleged ties to Scattered Spider, facing US charges for cyberattacks, fraud and data breaches.
19 views
Daily Writeups
⤷ Title: Label Leak: Hardcoded Credentials in Snap One WattBox Devices Open Door to Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:48:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2026 #CVE_2026_41446 #cybersecurity #Exploit #firmware update #Hardware Security #infosec #Power Controller #rce #root access #Snap One #WattBox
Daily CyberSecurity
Label Leak: Hardcoded Credentials in Snap One WattBox Devices Open Door to Root Access
Critical 9.2 CVSS flaw in WattBox 800/820 controllers (CVE-2026-41446) allows root RCE using plaintext hardware labels. Upgrade to firmware v2.10.0.0 now.
7 views
Daily Writeups
⤷ Title: Brinker Introduces a Novel Approach to Deepfake Detection
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:45:52 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Brinker Introduces a Novel Approach to Deepfake Detection
WILMINGTON, Delaware, 29th April 2026, CyberNewswire
7 views
Daily Writeups
⤷ Title: NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:01:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_24178 #CVE_2026_24186 #CVE_2026_24204 #cybersecurity #Federated Learning #infosec #Linux #macOS #NVFlare #NVIDIA FLARE #Patch Alert #rce
Daily CyberSecurity
NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover
NVIDIA issued an urgent patch for a critical 9.8 CVSS flaw in the FLARE SDK. Stop unauthenticated RCE and data tampering. Upgrade to v2.7.2 immediately.
7 views
Daily Writeups
⤷ Title: Browser Extensions = Silent Spy?
The Hidden Risk Sitting Inside Your Browser
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:42:33 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #artificial_intelligence #browser_extension #cybersecurity
Medium
Browser Extensions = Silent Spy? The Hidden Risk Sitting Inside Your Browser
We all love browser extensions. They make life easier — ad blockers remove annoying ads, grammar tools fix our writing, password managers…
7 views
Daily Writeups
⤷ Title: Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
════════════════════════
𐀪 Author: Elvis Pulaha
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:46:53 GMT
════════════════════════
⌗ Tags: #mobile #penetration_testing #cybersecurity #physical_keyboard
Medium
Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
Physical keyboards aren’t dead, they just evolved.
13 views
Daily Writeups
⤷ Title: Bypass Root Detection In Android App With Frida Hooks
════════════════════════
𐀪 Author: Maishamanarat
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:44:59 GMT
════════════════════════
⌗ Tags: #mobile_app_penetest #penetration_testing #reverse_engineering
Medium
Bypass Root Detection In Android App With Frida Hooks
Step 1: Decompile apk
12 views
Daily Writeups
⤷ Title: Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:31:11 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #vulnerability_management #cybersecurity
Medium
Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
Learn basic vulnerability discovery using scanning, testing, and enumeration.
18 views
Daily Writeups
⤷ Title: Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web…
════════════════════════
𐀪 Author: Shlyptr
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:13:48 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web Modern
Penulis: Sherly Putri Mata Kuliah: Pemrograman Web Topik: Keamanan Web
31 views
Daily Writeups
⤷ Title: $500 OAuth Account Fusion Pre-Takeover Attack
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:19:12 GMT
════════════════════════
⌗ Tags: #authentication_bypass #account_takeover #hackerone #bug_bounty_writeup #oauth
Medium
$500 OAuth Account Fusion Pre-Takeover Attack
Akwaaba! guys. Read my previous blog on Android Intent Redirection, an easy $2000 for mobile app hackers. At times, a simple path tweak can…
39 views
Daily Writeups
⤷ Title: Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:30:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_5435 #CVE_2026_6238 #DNS Vulnerability #glibc #GNU C Library #infosec #Legacy Code #Linux Security #open_source #Patch Alert
Daily CyberSecurity
Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
glibc warns of critical flaws (CVE-2026-5435 & CVE-2026-6238) in deprecated DNS functions. Patch legacy apps to avoid buffer overflows and memory leaks.
24 views
Daily Writeups
⤷ Title: The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Bootkit #Citrix #Cloud Security #CVSS 9.9 #Hypervisor #infosec #Jakob Wolffhechel #Shittrix #Storage Security #Virtualization Security #XCP_ng #XenServer
Daily CyberSecurity
The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
Jakob Wolffhechel reveals "Shittrix," 89 critical flaws in Citrix XenServer & XCP-ng. CVSS 9.9 bugs allow full host takeover. Assume compromise today.
16 views
Daily Writeups
⤷ Title: A Practical Guide to BloodHound Data Collection
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Alyssa Snow #Blue Team #Blue Team Tools #General InfoSec Tips & Tricks #How_To #Informational #Red Team #Red Team Tools #Active Directory #bloodhound
Black Hills Information Security, Inc.
A Practical Guide to BloodHound Data Collection - Black Hills Information Security, Inc.
This blog will not dive too deeply into BloodHound itself; instead, we will focus on various methods to collect AD data to provide BloodHound as input.
19 views