Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Brinker Introduces a Novel Approach to Deepfake Detection
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:45:21 +0000
════════════════════════
⌗ Tags: #Press Release #CISO #Monitoring #Product Launch
Hackread
Brinker Introduces a Novel Approach to Deepfake Detection
WILMINGTON, Delaware, 29th April 2026, CyberNewswire
27 views
Daily Writeups
⤷ Title: US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:19:54 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Data Breaches #Chicago #Cyber Attack #Cybersecurity #Estonia #Peter Stokes #Scattered Spider #Social Engineering #USA
Hackread
US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks
US-Estonian suspect Peter Stokes arrested in Finland over alleged ties to Scattered Spider, facing US charges for cyberattacks, fraud and data breaches.
19 views
Daily Writeups
⤷ Title: Label Leak: Hardcoded Credentials in Snap One WattBox Devices Open Door to Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:48:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2026 #CVE_2026_41446 #cybersecurity #Exploit #firmware update #Hardware Security #infosec #Power Controller #rce #root access #Snap One #WattBox
Daily CyberSecurity
Label Leak: Hardcoded Credentials in Snap One WattBox Devices Open Door to Root Access
Critical 9.2 CVSS flaw in WattBox 800/820 controllers (CVE-2026-41446) allows root RCE using plaintext hardware labels. Upgrade to firmware v2.10.0.0 now.
7 views
Daily Writeups
⤷ Title: Brinker Introduces a Novel Approach to Deepfake Detection
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:45:52 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Brinker Introduces a Novel Approach to Deepfake Detection
WILMINGTON, Delaware, 29th April 2026, CyberNewswire
7 views
Daily Writeups
⤷ Title: NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:01:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_24178 #CVE_2026_24186 #CVE_2026_24204 #cybersecurity #Federated Learning #infosec #Linux #macOS #NVFlare #NVIDIA FLARE #Patch Alert #rce
Daily CyberSecurity
NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover
NVIDIA issued an urgent patch for a critical 9.8 CVSS flaw in the FLARE SDK. Stop unauthenticated RCE and data tampering. Upgrade to v2.7.2 immediately.
7 views
Daily Writeups
⤷ Title: Browser Extensions = Silent Spy?
The Hidden Risk Sitting Inside Your Browser
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:42:33 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #artificial_intelligence #browser_extension #cybersecurity
Medium
Browser Extensions = Silent Spy? The Hidden Risk Sitting Inside Your Browser
We all love browser extensions. They make life easier — ad blockers remove annoying ads, grammar tools fix our writing, password managers…
7 views
Daily Writeups
⤷ Title: Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
════════════════════════
𐀪 Author: Elvis Pulaha
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:46:53 GMT
════════════════════════
⌗ Tags: #mobile #penetration_testing #cybersecurity #physical_keyboard
Medium
Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
Physical keyboards aren’t dead, they just evolved.
13 views
Daily Writeups
⤷ Title: Bypass Root Detection In Android App With Frida Hooks
════════════════════════
𐀪 Author: Maishamanarat
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:44:59 GMT
════════════════════════
⌗ Tags: #mobile_app_penetest #penetration_testing #reverse_engineering
Medium
Bypass Root Detection In Android App With Frida Hooks
Step 1: Decompile apk
12 views
Daily Writeups
⤷ Title: Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:31:11 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #vulnerability_management #cybersecurity
Medium
Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
Learn basic vulnerability discovery using scanning, testing, and enumeration.
18 views
Daily Writeups
⤷ Title: Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web…
════════════════════════
𐀪 Author: Shlyptr
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:13:48 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web Modern
Penulis: Sherly Putri Mata Kuliah: Pemrograman Web Topik: Keamanan Web
31 views
Daily Writeups
⤷ Title: $500 OAuth Account Fusion Pre-Takeover Attack
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:19:12 GMT
════════════════════════
⌗ Tags: #authentication_bypass #account_takeover #hackerone #bug_bounty_writeup #oauth
Medium
$500 OAuth Account Fusion Pre-Takeover Attack
Akwaaba! guys. Read my previous blog on Android Intent Redirection, an easy $2000 for mobile app hackers. At times, a simple path tweak can…
39 views
Daily Writeups
⤷ Title: Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:30:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_5435 #CVE_2026_6238 #DNS Vulnerability #glibc #GNU C Library #infosec #Legacy Code #Linux Security #open_source #Patch Alert
Daily CyberSecurity
Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
glibc warns of critical flaws (CVE-2026-5435 & CVE-2026-6238) in deprecated DNS functions. Patch legacy apps to avoid buffer overflows and memory leaks.
24 views
Daily Writeups
⤷ Title: The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Bootkit #Citrix #Cloud Security #CVSS 9.9 #Hypervisor #infosec #Jakob Wolffhechel #Shittrix #Storage Security #Virtualization Security #XCP_ng #XenServer
Daily CyberSecurity
The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
Jakob Wolffhechel reveals "Shittrix," 89 critical flaws in Citrix XenServer & XCP-ng. CVSS 9.9 bugs allow full host takeover. Assume compromise today.
16 views
Daily Writeups
⤷ Title: A Practical Guide to BloodHound Data Collection
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Alyssa Snow #Blue Team #Blue Team Tools #General InfoSec Tips & Tricks #How_To #Informational #Red Team #Red Team Tools #Active Directory #bloodhound
Black Hills Information Security, Inc.
A Practical Guide to BloodHound Data Collection - Black Hills Information Security, Inc.
This blog will not dive too deeply into BloodHound itself; instead, we will focus on various methods to collect AD data to provide BloodHound as input.
19 views
Daily Writeups
⤷ Title: Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
════════════════════════
𐀪 Author: CANITEY
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:32:10 GMT
════════════════════════
⌗ Tags: #csrf #xss_attack #bugbounty_writeup #account_takeover_attacks #bug_bounty
Medium
Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
Hey everyone, it’s been a while — Canitey here again.
10 views
Daily Writeups
⤷ Title: Finding an IDOR in Tesla From the Outside
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:59:27 GMT
════════════════════════
⌗ Tags: #hacking #software_development #tesla #bugcrowd #bug_bounty
Medium
Finding an IDOR in Tesla From the Outside
When you’re testing applications, you’ll eventually hit a wall — a point where the intended user flow just isn’t accessible.
15 views
Daily Writeups
⤷ Title: Encoding Bypasses | Complete Guide
════════════════════════
𐀪 Author: Amrsmooke
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:12:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #bug_bounty #encoding
Medium
Encoding Bypasses | Complete Guide
Common Encoding Types in Security
12 views
Daily Writeups
⤷ Title: Threat Modeling AI Systems: A Complete Playbook for Practitioners
════════════════════════
𐀪 Author: Brett Crawley
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:00:55 GMT
════════════════════════
⌗ Tags: #ai_agent #ai_security #application_security #llm #threat_modeling
Medium
Threat Modeling AI Systems: A Complete Playbook for Practitioners
The Blast Radius — Edition [4]
8 views
Daily Writeups
⤷ Title: How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
════════════════════════
𐀪 Author: Sukansh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:10:49 GMT
════════════════════════
⌗ Tags: #infosec #programming #cybersecurity #ethical_hacking #malware_analysis
Medium
How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
A step-by-step walkthrough of simulating the EternalBlue exploit chain, observing file encryption behavior, and building detection rules…
9 views
Daily Writeups
⤷ Title: Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:26:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #kerberoasting #kerberos #penetration_testing
Medium
Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
And why “we ran the wordlist and got nothing” is the most dangerous sentence in a pentest debrief.
6 views
Daily Writeups
⤷ Title: Masquerade CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:47:02 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #tryhackme_writeup #tryhackme #tryhackme_walkthrough #ctf_writeup
Medium
Masquerade CTF Notes | TryHackMe
Analyze malware traffic, decrypt payloads, and uncover attacker commands.
5 views