Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Eksperimen SQL Injection pada Aplikasi Web Sederhana: Studi Kasus dan Pencegahannya
════════════════════════
𐀪 Author: Sayyidsulthanabyan
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 04:31:53 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Eksperimen SQL Injection pada Aplikasi Web Sederhana: Studi Kasus dan Pencegahannya
Pendahuluan
29 views
Daily Writeups
⤷ Title: Broken by Design: How VECT 2.0 Ransomware Becomes a Permanent Data Wiper
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:15:04 +0000
════════════════════════
⌗ Tags: #Malware #ChaCha20 #Check Point Research #cybersecurity #Data Wiper #Encryption Flaw #ESXi Security #infosec #Malware Analysis #ransomware #TeamPCP #VECT 2.0
Daily CyberSecurity
Broken by Design: How VECT 2.0 Ransomware Becomes a Permanent Data Wiper
Check Point Research reveals VECT 2.0 ransomware is a broken wiper. A critical flaw makes file recovery impossible for files over 128KB. Read the analysis.
24 views
Daily Writeups
⤷ Title: Open Redirect Simple Bug, Powerful Chains: Phishing Se OAuth Bypass Tak! (Hinglish Mein)
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:13:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #web_security #bug_bounty #cybersecurity
Medium
Open Redirect Simple Bug, Powerful Chains: Phishing Se OAuth Bypass Tak! (Hinglish Mein)
Series: Bug Bounty Zero se Hero 🦸 | Article #22 By HackerMD | 16 min read
22 views
Daily Writeups
⤷ Title: Build Your Own AI Bug Hunter : Fully Local, Fully Private
════════════════════════
𐀪 Author: zerOiQ
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:02:35 GMT
════════════════════════
⌗ Tags: #technology #ai #llm #cybersecurity #bug_bounty
Medium
Build Your Own AI Bug Hunter : Fully Local, Fully Private
No cloud. No API keys. No one watching. Just you, your machine, and an AI that can execute commands.
11 views
Daily Writeups
⤷ Title: How I Found My First (Unethical) Bug
════════════════════════
𐀪 Author: Thatcyberboy
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:20:18 GMT
════════════════════════
⌗ Tags: #infosec #information_security #bug_bounty #hacking #bug_bounty_writeup
Medium
How I Found My First (Unethical) Bug
Introduction
11 views
Daily Writeups
⤷ Title: From packaging to behavior
════════════════════════
𐀪 Author: Progsky
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:52:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking
Medium
From packaging to behavior
As is well known, the market is flooded with all manner of security mechanisms: firewalls, intrusion detection systems, honeypots, and so…
7 views
Daily Writeups
⤷ Title: Linux File & Folder Protection + History Control (Practice Guide Only)
════════════════════════
𐀪 Author: DevOps voice
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:40:08 GMT
════════════════════════
⌗ Tags: #devsecops #audit #infosec #devops_security #cybersecurity
Medium
🔐 Linux File & Folder Protection + History Control (Practice Guide Only)
⚠️ For learning/practice only — DO NOT use direct in Dev/SIT/UAT/Prod environments
7 views
Daily Writeups
⤷ Title: Cisco Ethical Hacker Notes — part 8
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:07:43 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #cyber_security_awareness #infosec #ethical_hacking
Medium
Cisco Ethical Hacker Notes — part 8
Module 7: Cloud, Mobile, and IoT Security
11 views
Daily Writeups
⤷ Title: Week 6:From Signals to Security: Understanding and Inspecting Wireless Networks
════════════════════════
𐀪 Author: Nishant kumar
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:48:02 GMT
════════════════════════
⌗ Tags: #networking #wifihacking #cybersecurity #penetration_testing #kali_linux
Medium
Week 6:From Signals to Security: Understanding and Inspecting Wireless Networks
Welcome to Week 6. This week, we stop looking at wires and start looking at the invisible: Wi-Fi and Bluetooth. By the end of this article…
6 views
Daily Writeups
⤷ Title: DAST vs SAST: The Two Pillars of Modern Application Security
════════════════════════
𐀪 Author: Zubair Khan
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:14:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #dast #software_development #security #pentesting
Medium
DAST vs SAST: The Two Pillars of Modern Application Security
Security is no longer something you “add later.” It’s something you build into your application from day one.
8 views
Daily Writeups
⤷ Title: Why AI Pentesting Will Become Essential in the Future
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:03:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #artificial_intelligence #pentesting #cybersecurity #ethical_hacking
Medium
Why AI Pentesting Will Become Essential in the Future
Cybersecurity is evolving rapidly as organizations adopt cloud computing, APIs, microservices, and distributed infrastructures. At the same…
8 views
Daily Writeups
⤷ Title: 7 Critical SaaS Security Vulnerabilities We Keep Finding in Real Penetration Tests
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:06:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #cloud_security #penetration_testing #saas_security
Medium
7 Critical SaaS Security Vulnerabilities We Keep Finding in Real Penetration Tests
SaaS security usually looks solid right up until someone tests it like an attacker.
8 views
Daily Writeups
⤷ Title: TryHackMe (THM) Corridor Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:07:06 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #idor_vulnerability #md5 #corridor #tryhackme
Medium
TryHackMe (THM) Corridor Walkthrough
🔗Room Link : https://tryhackme.com/room/corridor
19 views
Daily Writeups
⤷ Title: Membongkar SQL Injection: Eksperimen Sederhana dan Cara Mencegahnya
════════════════════════
𐀪 Author: Hafizhalfauzi
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:22:11 GMT
════════════════════════
⌗ Tags: #programming #sql_injection #sql
Medium
Membongkar SQL Injection: Eksperimen Sederhana dan Cara Mencegahnya
Pendahuluan
28 views
Daily Writeups
⤷ Title: Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 12:37:00 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: 9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:25:33 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Kernel #Linux #Theori #Vulnerability #Xint Code
Hackread
9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access
Theori researchers reveal a decade-old Linux kernel flaw that allows hackers to gain root access by corrupting system memory with a simple Python script.
20 views
Daily Writeups
⤷ Title: Earning Their Keep: Audit Your Microsoft Sentinel Log Value with “Log Horizon”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:23:23 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure Sentinel #Cost Optimization #Defender XDR #FinOps #Infosec Tools #KQL #Log Analytics #Log Horizon #Microsoft Sentinel #PowerShell #Security Operations #SIEM #SoC
Penetration Testing Tools
Earning Their Keep: Audit Your Microsoft Sentinel Log Value with "Log Horizon"
Stop burning money in your SIEM. Log Horizon analyzes Microsoft Sentinel tables to score security value vs. cost, providing concrete saving recommendations.
14 views
Daily Writeups
⤷ Title: Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:21:31 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Security #Anodot #Cyber Security 2026 #data breach #data privacy #Infosec #Metadata Exposure #supply chain attack #third_party risk #Vimeo
Penetration Testing Tools
Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a compromise
9 views
Daily Writeups
⤷ Title: The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #bug bounty #CVE_2026_3854 #Cybersecurity 2026 #Git Push #Github #GitHub Enterprise Server #Infrastructure Security #RCE #remote code execution #Wiz Research
Penetration Testing Tools
The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
The seemingly mundane git push command has emerged as a significantly more treacherous vector than conventionally presumed. A
12 views
Daily Writeups
⤷ Title: The Sleeper in Your IDE: Unmasking the 73-Extension “GlassWorm” Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:01:51 +0000
════════════════════════
⌗ Tags: #Malware #.node binaries #Cursor AI #cyber_espionage #GlassWorm #IDE Security #infosec #Malware Analysis #Open VSX #Sleeper Extensions #Socket #VS Code #WindSurf
Daily CyberSecurity
The Sleeper in Your IDE: Unmasking the 73-Extension "GlassWorm" Espionage Campaign
Socket uncovers GlassWorm: a 73-extension sleeper campaign on Open VSX targeting VS Code and Cursor. Stealthy .node binaries turn trusted tools into malware.
8 views
Daily Writeups
⤷ Title: AI’s Open Secret: Why Your Cursor Extensions Can Silently Siphon Your API Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:11:58 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Code Editor #API keys #Credential Theft #Cursor AI #cybersecurity #Developer Tools #Extension Security #infosec #macOS #security vulnerability #SQLite #windows
Daily CyberSecurity
AI’s Open Secret: Why Your Cursor Extensions Can Silently Siphon Your API Keys
Cursor AI editor found storing API keys and tokens in an unprotected SQLite database, allowing extensions to steal credentials silently. CVSS 8.2. No patch yet.
9 views