Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Desert Power in the Code: How the “Mini Shai-Hulud” Malware Burrows into SAP’s npm Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 07:44:09 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js #CI/CD Security #CircleCI #cloud security #Credentials Theft #Cyber Security 2026 #GitHub Actions #malware #Mini Shai_Hulud #npm #SAP #supply chain attack
Information Security News
Desert Power in the Code: How the "Mini Shai-Hulud" Malware Burrows into SAP’s npm Supply Chain
Adversaries have once again targeted the npm supply chain, though this incursion pursued a surgical and perilous objective:
15 views
Daily Writeups
⤷ Title: Pro-Iran “313 Team” Paralyses Ubuntu Infrastructure with Massive DDoS and Extortion Demands
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 07:38:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #313 Team #Canonical #Cybersecurity 2026 #DDOS attack #Extortion #Hacktivism #Infrastructure Outage #Islamic Cyber Resistance in Iraq #Linux Security #ubuntu #Ubuntu.com Down
Information Security News
Pro-Iran "313 Team" Paralyses Ubuntu Infrastructure with Massive DDoS and Extortion Demands
Canonical has been besieged by a protracted DDoS offensive targeting its web infrastructure, resulting in widespread disruption to
11 views
Daily Writeups
⤷ Title: Ending the AI Regulation Maze: Tech Giants and Security Titans Launch MOSAIC to Harmonize Global Standards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 07:31:53 +0000
════════════════════════
⌗ Tags: #Technology #AI Regulation #AI Risk Management #AI security #Cloud Security Alliance #Cybersecurity Standards #MOSAIC #NIST #OpenCRE #OWASP #SANS Institute #Tech News 2026
Penetration Testing Tools
Ending the AI Regulation Maze: Tech Giants and Security Titans Launch MOSAIC to Harmonize Global Standards
Architects of artificial intelligence security standards are increasingly confronted by a predicament as formidable as the threats themselves:
11 views
Daily Writeups
⤷ Title: Breaking an Android Attendance App: VA Walkthrough
════════════════════════
𐀪 Author: MR SHAN
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:33:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #bugbounty_tips #mobile_security #cybersecurity
Medium
Breaking an Android Attendance App: VA Walkthrough
Hey folks,
9 views
Daily Writeups
⤷ Title: Bug Report Mastery — Get Accepted & Paid Faster (Part 9)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:52:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #security #hacking #linux
Medium
📝 Bug Report Mastery — Get Accepted & Paid Faster (Part 9)
Finding bugs is only half the game — reporting them properly gets you paid
20 views
Daily Writeups
⤷ Title: Finding a Path Traversal via Base64
════════════════════════
𐀪 Author: Tino
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:11:25 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #blogging
Medium
Finding a Path Traversal via Base64
It happened a few weeks ago, after finishing my main sprint tasks, I had some spare time. Instead of taking a break (gabut), I decided to…
16 views
Daily Writeups
⤷ Title: The Cybersecurity Market Punishes Brilliant Technology That Ships Badly
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:43:19 GMT
════════════════════════
⌗ Tags: #hacking #cyberattack #cybersecurity
Medium
The Cybersecurity Market Punishes Brilliant Technology That Ships Badly
Why Packaging, Channel Economics, and Onboarding Speed Have Become Decisive, and Why “We Have Better Tech” Is the Most Dangerous Sentence…
6 views
Daily Writeups
⤷ Title: I Have the Degree and the Experience. Here’s Why I’m Starting Over.
════════════════════════
𐀪 Author: Prathmesh Murugan
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:35:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #career_development #cybersecurity #hacking #information_technology
Medium
I Have the Degree and the Experience. Here’s Why I’m Starting Over.
I Was “Learning” Cybersecurity For Months. Then I Realised I Couldn’t Actually Do Anything.
10 views
Daily Writeups
⤷ Title: Kiba — TryHackMe WalkThrough
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:02:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_walkthrough #penetration_testing #ctf
Medium
Kiba — TryHackMe WalkThrough
Kiba — TryHackMe WalkThrough Date: 16/04/2026 Room Link: https://tryhackme.com/room/kiba My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this write-up, I demonstrate how I …
12 views
Daily Writeups
⤷ Title: IDOR | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:25:50 GMT
════════════════════════
⌗ Tags: #idor #tryhackme #red_team #cybersecurity
Medium
IDOR | TryHackMe
Learn how to find and exploit IDOR vulnerabilities in a web application giving you access to data that you shouldn’t have.
16 views
Daily Writeups
⤷ Title: IronShade | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:46:39 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #tryhackme #blue_team
Medium
IronShade | TryHackMe
Perform a compromise assessment on a Linux host and identify the attack footprints.
17 views
Daily Writeups
⤷ Title: Love Letter Locker | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #idor #cybersecurity #ctf_writeup #ctf
Medium
Love Letter Locker | TryHackMe Write-up
Hello everyone! In this write-up, we’ll solve the Love Letter Locker room on TryHackMe. The goal is to access hidden love letters and…
12 views
Daily Writeups
⤷ Title: TryHackMe Pre-Security Path — Notes I Wish I Had on Day One
════════════════════════
𐀪 Author: Prathmesh Murugan
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:09:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #networking #tryhackme #technology
Medium
Pre-Security Path Notes — TryHackMe
All 7 modules, no fluff . Networks, DNS, HTTP, OS and more - written the way I actually think about it !
10 views
Daily Writeups
⤷ Title: TryHackMe (THM) ContAInment Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:02:08 GMT
════════════════════════
⌗ Tags: #pcap_analysis #ai_security #tryhackme #containment #tryhackme_writeup
Medium
TryHackMe (THM) ContAInment Walkthrough
🔗Room Link : https://tryhackme.com/room/containment
17 views
Daily Writeups
⤷ Title: Breaking Down CVE-2026–31431 (“Copy Fail”): What You Need to Know
════════════════════════
𐀪 Author: MainEkHacker
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:31:01 GMT
════════════════════════
⌗ Tags: #linux #ethical_hacking #cve #exploit #cybersecurity
Medium
Breaking Down CVE-2026–31431 (“Copy Fail”): What You Need to Know
Let’s understand the story..
25 views
Daily Writeups
⤷ Title: Advanced API Protection for Your WHMCS Store in One App
════════════════════════
𐀪 Author: SmartersX
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:03:54 GMT
════════════════════════
⌗ Tags: #smartersx #cybersecurity #api_security
Medium
Advanced API Protection for Your WHMCS Store in One App
Secure your business with SmartersX — designed to protect, monitor, and manage your APIs effortlessly. Stay ahead of threats while keeping…
43 views
Daily Writeups
⤷ Title: XSS 與 CSRF 是什麼？為什麼會偷走你的登入？
════════════════════════
𐀪 Author: Chiayu
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:40:25 GMT
════════════════════════
⌗ Tags: #xs #軟體工程師 #駭客 #全端工程師 #csrf
Medium
XSS 與 CSRF 是什麼？為什麼會偷走你的登入？
知道 Cookie、Session、JWT，還有 token 存放方式之後，會發現，最大問題其實不是怎麼登入
52 views
Daily Writeups
⤷ Title: 2026: The Year of AI-Assisted Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 04 May 2026 17:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 04 May 2026 17:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Sentry’s 9.1 CVSS SSO Flaw Lets Attackers “Link” Their Way Into Your Account
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:45:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA #Account Takeover #CVE_2026_42354 #CVSS 9.1 #cybersecurity #Identity Linking #infosec #SAML SSO #Self_Hosted Sentry #sentry #SSO Bypass
Daily CyberSecurity
Sentry’s 9.1 CVSS SSO Flaw Lets Attackers "Link" Their Way Into Your Account
Sentry reveals a critical 9.1 CVSS flaw (CVE-2026-42354) in SAML SSO. Multi-org instances are at risk of account takeover via identity linking. Patch now!
24 views
Daily Writeups
⤷ Title: Critical Collision Bug in Auth Library Merges All Patreon Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_42560 #cybersecurity #Golang #Identity Collision #infosec #OAuth #Patreon #privilege escalation #Social Login #Web Security
Daily CyberSecurity
Critical Collision Bug in Auth Library Merges All Patreon Users
A critical 9.1 CVSS flaw in a Go auth library causes a Patreon "identity collision," merging all users into one account. Upgrade to v2.1.2 immediately!
17 views