Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
════════════════════════
𐀪 Author: Elvis Pulaha
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:46:53 GMT
════════════════════════
⌗ Tags: #mobile #penetration_testing #cybersecurity #physical_keyboard
Medium
Unihertz Titan 2 Elite: The Ultimate Pocket Terminal for Cybersecurity Professionals
Physical keyboards aren’t dead, they just evolved.
13 views
Daily Writeups
⤷ Title: Bypass Root Detection In Android App With Frida Hooks
════════════════════════
𐀪 Author: Maishamanarat
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:44:59 GMT
════════════════════════
⌗ Tags: #mobile_app_penetest #penetration_testing #reverse_engineering
Medium
Bypass Root Detection In Android App With Frida Hooks
Step 1: Decompile apk
12 views
Daily Writeups
⤷ Title: Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 12:31:11 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #vulnerability_management #cybersecurity
Medium
Basic Vulnerability Identification Techniques Walkthrough Notes | TryHackMe
Learn basic vulnerability discovery using scanning, testing, and enumeration.
18 views
Daily Writeups
⤷ Title: Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web…
════════════════════════
𐀪 Author: Shlyptr
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:13:48 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Eksperimen Keamanan Web: Analisis SQL Injection dan Cross-Site Scripting (XSS) pada Aplikasi Web Modern
Penulis: Sherly Putri Mata Kuliah: Pemrograman Web Topik: Keamanan Web
31 views
Daily Writeups
⤷ Title: $500 OAuth Account Fusion Pre-Takeover Attack
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 11:19:12 GMT
════════════════════════
⌗ Tags: #authentication_bypass #account_takeover #hackerone #bug_bounty_writeup #oauth
Medium
$500 OAuth Account Fusion Pre-Takeover Attack
Akwaaba! guys. Read my previous blog on Android Intent Redirection, an easy $2000 for mobile app hackers. At times, a simple path tweak can…
39 views
Daily Writeups
⤷ Title: Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:30:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_5435 #CVE_2026_6238 #DNS Vulnerability #glibc #GNU C Library #infosec #Legacy Code #Linux Security #open_source #Patch Alert
Daily CyberSecurity
Legacy Leak: Deprecated GNU C Library Functions Spark New Security Fears
glibc warns of critical flaws (CVE-2026-5435 & CVE-2026-6238) in deprecated DNS functions. Patch legacy apps to avoid buffer overflows and memory leaks.
24 views
Daily Writeups
⤷ Title: The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Bootkit #Citrix #Cloud Security #CVSS 9.9 #Hypervisor #infosec #Jakob Wolffhechel #Shittrix #Storage Security #Virtualization Security #XCP_ng #XenServer
Daily CyberSecurity
The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
Jakob Wolffhechel reveals "Shittrix," 89 critical flaws in Citrix XenServer & XCP-ng. CVSS 9.9 bugs allow full host takeover. Assume compromise today.
16 views
Daily Writeups
⤷ Title: A Practical Guide to BloodHound Data Collection
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Alyssa Snow #Blue Team #Blue Team Tools #General InfoSec Tips & Tricks #How_To #Informational #Red Team #Red Team Tools #Active Directory #bloodhound
Black Hills Information Security, Inc.
A Practical Guide to BloodHound Data Collection - Black Hills Information Security, Inc.
This blog will not dive too deeply into BloodHound itself; instead, we will focus on various methods to collect AD data to provide BloodHound as input.
19 views
Daily Writeups
⤷ Title: Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
════════════════════════
𐀪 Author: CANITEY
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:32:10 GMT
════════════════════════
⌗ Tags: #csrf #xss_attack #bugbounty_writeup #account_takeover_attacks #bug_bounty
Medium
Self-XSS + CSRF Leading to Account Takeover (50-Character Payload Limit Challenge)
Hey everyone, it’s been a while — Canitey here again.
10 views
Daily Writeups
⤷ Title: Finding an IDOR in Tesla From the Outside
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:59:27 GMT
════════════════════════
⌗ Tags: #hacking #software_development #tesla #bugcrowd #bug_bounty
Medium
Finding an IDOR in Tesla From the Outside
When you’re testing applications, you’ll eventually hit a wall — a point where the intended user flow just isn’t accessible.
15 views
Daily Writeups
⤷ Title: Encoding Bypasses | Complete Guide
════════════════════════
𐀪 Author: Amrsmooke
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:12:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #bug_bounty #encoding
Medium
Encoding Bypasses | Complete Guide
Common Encoding Types in Security
12 views
Daily Writeups
⤷ Title: Threat Modeling AI Systems: A Complete Playbook for Practitioners
════════════════════════
𐀪 Author: Brett Crawley
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:00:55 GMT
════════════════════════
⌗ Tags: #ai_agent #ai_security #application_security #llm #threat_modeling
Medium
Threat Modeling AI Systems: A Complete Playbook for Practitioners
The Blast Radius — Edition [4]
8 views
Daily Writeups
⤷ Title: How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
════════════════════════
𐀪 Author: Sukansh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:10:49 GMT
════════════════════════
⌗ Tags: #infosec #programming #cybersecurity #ethical_hacking #malware_analysis
Medium
How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
A step-by-step walkthrough of simulating the EternalBlue exploit chain, observing file encryption behavior, and building detection rules…
9 views
Daily Writeups
⤷ Title: Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:26:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #kerberoasting #kerberos #penetration_testing
Medium
Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
And why “we ran the wordlist and got nothing” is the most dangerous sentence in a pentest debrief.
6 views
Daily Writeups
⤷ Title: Masquerade CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:47:02 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #tryhackme_writeup #tryhackme #tryhackme_walkthrough #ctf_writeup
Medium
Masquerade CTF Notes | TryHackMe
Analyze malware traffic, decrypt payloads, and uncover attacker commands.
5 views
Daily Writeups
⤷ Title: The Dorking Manifesto: Uncovering the Hidden Web
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:47:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #open_source #google_dorking #cybersecurity
Medium
The Dorking Manifesto: Uncovering the Hidden Web
“The internet forgets nothing. It only hides things badly.”
11 views
Daily Writeups
⤷ Title: Cyber Security: The First Line of Defense in a Connected World
════════════════════════
𐀪 Author: Arti Sandip Jadhav
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:39:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #online_safety #cybersecurity #data_security #technolo
Medium
🔐 Cyber Security: The First Line of Defense in a Connected World
Cybersecurity Is Now More Important Than Ever Before!
18 views
Daily Writeups
⤷ Title: Part 2 : Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:14:58 GMT
════════════════════════
⌗ Tags: #xss_attack #web_attack #xss_vulnerability #xss_bypass
Medium
Part 2 : Cross-Site Scripting (XSS)
Real-World Web Attacks Explained
27 views
Daily Writeups
⤷ Title: Part 1 : SQL Injection Attacks
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:15:49 GMT
════════════════════════
⌗ Tags: #sql_server #web_attack #sql #sql_injection
Medium
Part 1 : SQL Injection Attacks
Real-World Web Attacks Explained
39 views
Daily Writeups
⤷ Title: Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 16:22:03 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Cyber Attack #Cybersecurity #data breach #Polymarket #Vulnerability #Xorcat
Hackread
Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
A hacker using the alias "Xorcat" claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident.
31 views
Daily Writeups
⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
25 views