Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How I Discovered 5 broken Access Control Bugs in a Single Web Application
════════════════════════
𐀪 Author: 0xyz
════════════════════════
ⴵ Time: Fri, 01 May 2026 17:36:38 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips #cybersecurity
Medium
How I Discovered 5 broken Access Control Bugs in a Single Web Application
Hi Hunters,
23 views
Daily Writeups
⤷ Title: The boring method that got me paid in bug bounty (while others chased hype) helped me find critical vulnerabilities
════════════════════════
𐀪 Author: DEep
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:44:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #cybersecurity #hacking #bug_bounty_tips
Medium
How focusing on a single bug bounty program for months helped me find critical vulnerabilities
Most bug hunters jump from one program to another.
28 views
Daily Writeups
⤷ Title: Apache MINA Fixes Critical RCE Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:30:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA #CVE_2026_42778 #CVE_2026_42779 #Deserialization #infosec #IoBuffer #Java security #patch management #rce #Vulnerability Research
Daily CyberSecurity
Apache MINA Fixes Critical RCE Vulnerabilities
Apache MINA issues emergency patches for two 9.8 CVSS RCE flaws left behind by mistake. Unauthenticated attackers can bypass filters via deserialization.
16 views
Daily Writeups
⤷ Title: MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Backend Security #CVE_2026_4670 #CVE_2026_5174 #Data Security #infosec #MOVEit Automation #Patch Alert #privilege escalation #Progress Software
Daily CyberSecurity
MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8
MOVEit Automation faces a critical 9.8 CVSS flaw (CVE-2026-4670). Attackers can bypass auth to seize admin control and expose data. Patch immediately.
12 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:57:05 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CPanel #CVE_2026_41940 #CVSS 10 #cybersecurity #Express.js #infosec #patch management #Vulnerability Digest #WHM
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
Weekly Triage: 1,134 new vulnerabilities found, including a 9.8 critical bypass in cPanel/WHM and active Express.js logic flaws. Patch your systems now.
14 views
Daily Writeups
⤷ Title: FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:18:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BSD Security #Command Injection #CVE_2026_42511 #dhclient #dhcp #freebsd #infosec #network_security #Patch Alert #Root Exploit #SysAdmin
Daily CyberSecurity
FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege
FreeBSD warns of CVE-2026-42511: a critical dhclient flaw allowing rogue DHCP servers to execute code as root via BOOTP file injection. Patch and reboot now!
11 views
Daily Writeups
⤷ Title: Active Exploitation in the Wild: Critical Qinglong Bypasses Fuel Covert Cryptomining Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:01:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cryptomining #CVE_2026_3965 #CVE_2026_4047 #cybersecurity #Express.js #infosec #Qinglong #rce #Snyk #Task Management
Daily CyberSecurity
Active Exploitation in the Wild: Critical Qinglong Bypasses Fuel Covert Cryptomining Campaign
Snyk warns of active in-the-wild exploitation of the Qinglong platform. Two authentication bypass flaws grant attackers RCE to deploy .fullgc cryptominers.
8 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence Report 27 Apr 2026
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:34:06 GMT
════════════════════════
⌗ Tags: #cyberattack #threat_intelligence #hacking #cybersecurity #infosec
Medium
Weekly Threat Intelligence Report 27 Apr 2026
This document summarizes key cyber threats identified between Apr 20 and Apr 26, 2026, including related threat events
11 views
Daily Writeups
⤷ Title: I hacked my AC with some AI superpowers.
════════════════════════
𐀪 Author: Rodrigo Reyes
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:29:22 GMT
════════════════════════
⌗ Tags: #coding #artificial_intelligence #hacking #open_source
Medium
I hacked my AC with some AI superpowers.
A few days ago I was reminded how GNU/Linux came to be. One of the more memorable things Richard Stallman did at MIT was reverse-engineer…
13 views
Daily Writeups
⤷ Title: El Fin de Las Contraseñas
════════════════════════
𐀪 Author: GioiaCintia
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:31:49 GMT
════════════════════════
⌗ Tags: #passwords #hacking
Medium
El Fin de Las Contraseñas
El fin de las contraseñas: ¿Por qué tu próximo “password” podría ser el ritmo de tu corazón?
17 views
Daily Writeups
⤷ Title: The Dark Corner of the Digital Underground: Inside EsqueleSquad’s Ecosystem of Harassment and…
════════════════════════
𐀪 Author: GioiaCintia
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:24:44 GMT
════════════════════════
⌗ Tags: #esquelesquad #hacking #hacker #discord #ciberseguridad
Medium
The Dark Corner of the Digital Underground: Inside EsqueleSquad’s Ecosystem of Harassment and…
In the deeper, toxic layers of the regional digital underground, names don’t gain notoriety through media attention, but through direct…
15 views
Daily Writeups
⤷ Title: OSEP, why is it so eepy? x)
════════════════════════
𐀪 Author: Zumi Yumi
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:02:58 GMT
════════════════════════
⌗ Tags: #antivirus #hacking #offsec #osep #pentesting
Medium
OSEP, why is it so eepy? x)
Introduction:
20 views
Daily Writeups
⤷ Title: What is information gathering By Umairhacks
════════════════════════
𐀪 Author: Muhammad Umair Javed
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:50:45 GMT
════════════════════════
⌗ Tags: #ethical_hacking #umairhack
Medium
What is information gathering By Umairhacks
What is information Ghatering …?
28 views
Daily Writeups
⤷ Title: Python Se Bug Hunting Automate Karo Apne Tools Banao, 10x Fast Hunt Karo!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 04 May 2026 04:31:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #infosec #ethical_hacking
Medium
Python Se Bug Hunting Automate Karo Apne Tools Banao, 10x Fast Hunt Karo!
Series: Bug Bounty Zero se Hero 🦸 | Article #29 By HackerMD | 22 min read
25 views
Daily Writeups
⤷ Title: Authentication & Session Attacks: How Hackers Hijack Accounts Without Passwords
════════════════════════
𐀪 Author: Kishor K.
════════════════════════
ⴵ Time: Mon, 04 May 2026 04:01:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #cybersecurity_training #appsec #ethical_hacking
Medium
Authentication & Session Attacks: How Hackers Hijack Accounts Without Passwords
Think about what you did this morning. You logged into your favorite website, checked a few things, and closed the tab. An hour later, you…
18 views
Daily Writeups
⤷ Title: Trust as a Vector What the EtherRAT Campaign Reveals About Security’s Blind Spot
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Mon, 04 May 2026 04:16:20 GMT
════════════════════════
⌗ Tags: #threat_intelligence #technology #cybersecurity #information_security #hacking
Medium
Trust as a Vector What the EtherRAT Campaign Reveals About Security’s Blind Spot
The technical analysis of EtherRAT by Atos TRC is detailed and useful. SEO poisoning, fake GitHub repositories, Node.js payloads…
18 views
Daily Writeups
⤷ Title: Cisco Ethical Hacker Notes — part 12
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Mon, 04 May 2026 04:33:40 GMT
════════════════════════
⌗ Tags: #infosec #cyber_security_awareness #web_development #cybersecurity #ethical_hacking
Medium
Cisco Ethical Hacker Notes — part 12
Understanding the Basic Concepts of Scripting and Software Development — part 3
23 views
Daily Writeups
⤷ Title: Mengenal Apa Itu Penetration Testing?
════════════════════════
𐀪 Author: Hilwa Annisa
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:59:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity
Medium
Mengenal Apa Itu Penetration Testing?
penetration testing adalah sebuah metode untuk menguji seberapa kuat sistem keamanan sebuah jaringan, aplikasi, atau website. Teknik ini…
25 views
Daily Writeups
⤷ Title: Networking for Hackers: A Deep Dive into Packets & Protocols
════════════════════════
𐀪 Author: Kishor K.
════════════════════════
ⴵ Time: Mon, 04 May 2026 03:43:32 GMT
════════════════════════
⌗ Tags: #computer_networking #ethical_hacking #cyber #daily_blog #cybersecurity_awareness
Medium
Networking for Hackers: A Deep Dive into Packets & Protocols
I still remember the first time I fired up Wireshark. I pressed the blue shark fin icon to start capturing traffic on my Wi-Fi interface…
51 views
Daily Writeups
⤷ Title: Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 04 May 2026 11:29:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Attackers Weaponized Kuse.ai for Stealth Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 06:27:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Agents #AI security #Credential Harvesting #cybersecurity #infosec #Kuse.ai #Markdown Phishing #phishing #Trend Micro #VEC #Vendor Email Compromise
Daily CyberSecurity
Attackers Weaponized Kuse.ai for Stealth Phishing
Trend Micro uncovers a phishing campaign abusing Kuse.ai and VEC to steal credentials via markdown notes. Don't trust a domain just because of its reputation.
30 views