Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Why AI Pentesting Will Become Essential in the Future
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:03:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #artificial_intelligence #pentesting #cybersecurity #ethical_hacking
Medium
Why AI Pentesting Will Become Essential in the Future
Cybersecurity is evolving rapidly as organizations adopt cloud computing, APIs, microservices, and distributed infrastructures. At the same…
8 views
Daily Writeups
⤷ Title: 7 Critical SaaS Security Vulnerabilities We Keep Finding in Real Penetration Tests
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 05:06:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #cloud_security #penetration_testing #saas_security
Medium
7 Critical SaaS Security Vulnerabilities We Keep Finding in Real Penetration Tests
SaaS security usually looks solid right up until someone tests it like an attacker.
8 views
Daily Writeups
⤷ Title: TryHackMe (THM) Corridor Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:07:06 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #idor_vulnerability #md5 #corridor #tryhackme
Medium
TryHackMe (THM) Corridor Walkthrough
🔗Room Link : https://tryhackme.com/room/corridor
19 views
Daily Writeups
⤷ Title: Membongkar SQL Injection: Eksperimen Sederhana dan Cara Mencegahnya
════════════════════════
𐀪 Author: Hafizhalfauzi
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:22:11 GMT
════════════════════════
⌗ Tags: #programming #sql_injection #sql
Medium
Membongkar SQL Injection: Eksperimen Sederhana dan Cara Mencegahnya
Pendahuluan
28 views
Daily Writeups
⤷ Title: Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 12:37:00 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: 9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:25:33 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Kernel #Linux #Theori #Vulnerability #Xint Code
Hackread
9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access
Theori researchers reveal a decade-old Linux kernel flaw that allows hackers to gain root access by corrupting system memory with a simple Python script.
20 views
Daily Writeups
⤷ Title: Earning Their Keep: Audit Your Microsoft Sentinel Log Value with “Log Horizon”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:23:23 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure Sentinel #Cost Optimization #Defender XDR #FinOps #Infosec Tools #KQL #Log Analytics #Log Horizon #Microsoft Sentinel #PowerShell #Security Operations #SIEM #SoC
Penetration Testing Tools
Earning Their Keep: Audit Your Microsoft Sentinel Log Value with "Log Horizon"
Stop burning money in your SIEM. Log Horizon analyzes Microsoft Sentinel tables to score security value vs. cost, providing concrete saving recommendations.
14 views
Daily Writeups
⤷ Title: Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:21:31 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Security #Anodot #Cyber Security 2026 #data breach #data privacy #Infosec #Metadata Exposure #supply chain attack #third_party risk #Vimeo
Penetration Testing Tools
Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a compromise
9 views
Daily Writeups
⤷ Title: The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #bug bounty #CVE_2026_3854 #Cybersecurity 2026 #Git Push #Github #GitHub Enterprise Server #Infrastructure Security #RCE #remote code execution #Wiz Research
Penetration Testing Tools
The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
The seemingly mundane git push command has emerged as a significantly more treacherous vector than conventionally presumed. A
12 views
Daily Writeups
⤷ Title: The Sleeper in Your IDE: Unmasking the 73-Extension “GlassWorm” Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:01:51 +0000
════════════════════════
⌗ Tags: #Malware #.node binaries #Cursor AI #cyber_espionage #GlassWorm #IDE Security #infosec #Malware Analysis #Open VSX #Sleeper Extensions #Socket #VS Code #WindSurf
Daily CyberSecurity
The Sleeper in Your IDE: Unmasking the 73-Extension "GlassWorm" Espionage Campaign
Socket uncovers GlassWorm: a 73-extension sleeper campaign on Open VSX targeting VS Code and Cursor. Stealthy .node binaries turn trusted tools into malware.
8 views
Daily Writeups
⤷ Title: AI’s Open Secret: Why Your Cursor Extensions Can Silently Siphon Your API Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:11:58 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Code Editor #API keys #Credential Theft #Cursor AI #cybersecurity #Developer Tools #Extension Security #infosec #macOS #security vulnerability #SQLite #windows
Daily CyberSecurity
AI’s Open Secret: Why Your Cursor Extensions Can Silently Siphon Your API Keys
Cursor AI editor found storing API keys and tokens in an unprotected SQLite database, allowing extensions to steal credentials silently. CVSS 8.2. No patch yet.
9 views
Daily Writeups
⤷ Title: BUG-BOUNTY SERIES 8: DNS Enumeration.
════════════════════════
𐀪 Author: Krisna Wahyu Andriawan
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:27:14 GMT
════════════════════════
⌗ Tags: #linux #bug_bounty
Medium
BUG-BOUNTY SERIES 8: DNS Enumeration. Menggali Informasi Infrastruktur untuk Menemukan Celah Tersembunyi
Setelah pada Series 7 kita berhasil mengidentifikasi subdomain dan memperluas attack surface, langkah berikutnya yang tidak kalah penting…
8 views
Daily Writeups
⤷ Title: BUG-BOUNTY SERIES 7: Subdomain Enumeration & Attack Surface Mapping.
════════════════════════
𐀪 Author: Krisna Wahyu Andriawan
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:21:19 GMT
════════════════════════
⌗ Tags: #linux #bug_bounty
Medium
BUG-BOUNTY SERIES 7: Subdomain Enumeration & Attack Surface Mapping. Mengungkap Aset Tersembunyi dalam Target
Dalam praktik Bug Bounty, banyak vulnerability tidak ditemukan pada domain utama, melainkan pada subdomain yang terlupakan, tidak…
9 views
Daily Writeups
⤷ Title: Automating Endpoint Discovery & Testing — The Bug Hunter’s Workflow
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:04:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #security #bug_bounty #infosec
Medium
🚀 Automating Endpoint Discovery & Testing — The Bug Hunter’s Workflow
From Manual Guessing → Full Recon Automation
12 views
Daily Writeups
⤷ Title: SHADOW PROTOCOL
Chapter 1: The One Who Said No (Revised)
The rain in Guwahati didn’t bother…
════════════════════════
𐀪 Author: Tapudhan Rongpee
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:44:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
SHADOW PROTOCOL
Chapter 1: The One Who Said No (Revised)
The rain in Guwahati didn’t bother…
SHADOW PROTOCOL Chapter 1: The One Who Said No (Revised) The rain in Guwahati didn’t bother Tapudhan Rongpee. What bothered him… was silence. Tapan hadn’t replied in 12 minutes. That wasn’t …
8 views
Daily Writeups
⤷ Title: 10 Cybersecurity Best Practices to Protect Your Data in 2026
════════════════════════
𐀪 Author: CyberAlchemist Fahad
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:54:15 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #privacy #mystery #hacking
Medium
10 Cybersecurity Best Practices to Protect Your Data in 2026
It was 3 AM. The city was asleep, but my screen was alive with a flickering light. Somewhere, thousands of miles away, a silent shadow was…
9 views
Daily Writeups
⤷ Title: Kali Linux Desktop Customization
════════════════════════
𐀪 Author: fsocietyhub
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:37:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #infosec #kali_linux #linux
Medium
Kali Linux Desktop Customization
Engineering the custom fsocietyhub desktop experience
10 views
Daily Writeups
⤷ Title: TryHackMe — Brains Writeup
════════════════════════
𐀪 Author: Rootseekerx0x
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:16:40 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #tryhackme #cybersecurity #red_team
Medium
TryHackMe — Brains Writeup
Difficulty: Easy–Medium Room: https://tryhackme.com/room/brains Category: Web Exploitation / RCE / Blue Team Analysis Tools Used: Nmap…
8 views
Daily Writeups
⤷ Title: Extract | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:51:22 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #cybersecurity #vulnerability
Medium
Extract | TryHackMe
Can you extract the secrets from the library?
11 views
Daily Writeups
⤷ Title: Chaining Vulnerabilities | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 08:48:15 GMT
════════════════════════
⌗ Tags: #chaining_vulnerabilities #tryhackme #cybersecurity
Medium
Chaining Vulnerabilities | TryHackMe
Learn how to chain vulnerabilities! From Low to High!
10 views
Daily Writeups
⤷ Title: Best Ethical Hacking Training in Noida | Ducat India
════════════════════════
𐀪 Author: Ehsankkhan
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:59:19 GMT
════════════════════════
⌗ Tags: #ethical #ethical_ai #ethical_hacking
Medium
Best Ethical Hacking Training in Noida | Ducat India
In today’s digital era, cybersecurity has become a paramount concern for individuals and
12 views