Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: TryHackMe (THM) ContAInment Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:02:08 GMT
════════════════════════
⌗ Tags: #pcap_analysis #ai_security #tryhackme #containment #tryhackme_writeup
Medium
TryHackMe (THM) ContAInment Walkthrough
🔗Room Link : https://tryhackme.com/room/containment
17 views
Daily Writeups
⤷ Title: Breaking Down CVE-2026–31431 (“Copy Fail”): What You Need to Know
════════════════════════
𐀪 Author: MainEkHacker
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:31:01 GMT
════════════════════════
⌗ Tags: #linux #ethical_hacking #cve #exploit #cybersecurity
Medium
Breaking Down CVE-2026–31431 (“Copy Fail”): What You Need to Know
Let’s understand the story..
25 views
Daily Writeups
⤷ Title: Advanced API Protection for Your WHMCS Store in One App
════════════════════════
𐀪 Author: SmartersX
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:03:54 GMT
════════════════════════
⌗ Tags: #smartersx #cybersecurity #api_security
Medium
Advanced API Protection for Your WHMCS Store in One App
Secure your business with SmartersX — designed to protect, monitor, and manage your APIs effortlessly. Stay ahead of threats while keeping…
43 views
Daily Writeups
⤷ Title: XSS 與 CSRF 是什麼？為什麼會偷走你的登入？
════════════════════════
𐀪 Author: Chiayu
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:40:25 GMT
════════════════════════
⌗ Tags: #xs #軟體工程師 #駭客 #全端工程師 #csrf
Medium
XSS 與 CSRF 是什麼？為什麼會偷走你的登入？
知道 Cookie、Session、JWT，還有 token 存放方式之後，會發現，最大問題其實不是怎麼登入
52 views
Daily Writeups
⤷ Title: 2026: The Year of AI-Assisted Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 04 May 2026 17:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 04 May 2026 17:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Sentry’s 9.1 CVSS SSO Flaw Lets Attackers “Link” Their Way Into Your Account
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:45:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA #Account Takeover #CVE_2026_42354 #CVSS 9.1 #cybersecurity #Identity Linking #infosec #SAML SSO #Self_Hosted Sentry #sentry #SSO Bypass
Daily CyberSecurity
Sentry’s 9.1 CVSS SSO Flaw Lets Attackers "Link" Their Way Into Your Account
Sentry reveals a critical 9.1 CVSS flaw (CVE-2026-42354) in SAML SSO. Multi-org instances are at risk of account takeover via identity linking. Patch now!
24 views
Daily Writeups
⤷ Title: Critical Collision Bug in Auth Library Merges All Patreon Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_42560 #cybersecurity #Golang #Identity Collision #infosec #OAuth #Patreon #privilege escalation #Social Login #Web Security
Daily CyberSecurity
Critical Collision Bug in Auth Library Merges All Patreon Users
A critical 9.1 CVSS flaw in a Go auth library causes a Patreon "identity collision," merging all users into one account. Upgrade to v2.1.2 immediately!
17 views
Daily Writeups
⤷ Title: Fully Exposed: Public PoC Released for the Adobe PDF Vulnerabilities Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 10:17:34 +0000
════════════════════════
⌗ Tags: #Vulnerability
Daily CyberSecurity
Fully Exposed: Public PoC Released for the Adobe PDF Vulnerabilities Exploited in the Wild
A public PoC has been disclosed for an Adobe Acrobat prototype pollution chain (CVE-2026-34621) actively exploited in the wild. Patch your systems today!
17 views
Daily Writeups
⤷ Title: OpenAI Introduces Advanced Account Security to Safeguard AI Identities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:14:10 +0000
════════════════════════
⌗ Tags: #Technology #Advanced Account Security #AI Privacy #ChatGPT #cybersecurity #infosec #MFA #OpenAI #Passkeys #Phishing Resistance #Trusted Access for Cyber #Yubico
Daily CyberSecurity
OpenAI Introduces Advanced Account Security to Safeguard AI Identities
OpenAI launches Advanced Account Security for high-risk users. Features include mandatory passkeys, disabled SMS recovery, and automatic training exclusion.
13 views
Daily Writeups
⤷ Title: CVE-2026-29200: A 9.9 CVSS Comet Backup Flaw Granting Total Cross-Tenant Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 09:05:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #API security #cloud backup #Comet Backup #Cross_Tenant Takeover #CVE_2026_29200 #CVSS 9.9 #cybersecurity #IDOR #infosec #Patch Alert
Daily CyberSecurity
CVE-2026-29200: A 9.9 CVSS Comet Backup Flaw Granting Total Cross-Tenant Takeover
A critical 9.9 CVSS IDOR flaw in Comet Backup allows complete cross-tenant account takeovers. Self-hosted administrators must patch servers immediately!
9 views
Daily Writeups
⤷ Title: Guide For Fresher Bug Hunter …
════════════════════════
𐀪 Author: Md Tanjimul Islam Sifat
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:42:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #beginners_guide #bug_bounty #ethical_hacking #bug_hunting
Medium
Guide For Fresher Bug Hunter …
Bug bounty hunting mistake most beginners make is targeting big companies too early. This leads to heavy competition and frequent…
8 views
Daily Writeups
⤷ Title: Red Team Automation: 12 Scripts That Save Hours (and Win Real Engagements)
════════════════════════
𐀪 Author: vipin
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:40:50 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #bug_bounty #script #hacking
Medium
Red Team Automation: 12 Scripts That Save Hours (and Win Real Engagements)
Ever burned a whole weekend on manual recon, only to realize you missed a low-hanging RCE vector because you were sorting through logs by…
8 views
Daily Writeups
⤷ Title: How I Found XSS by Understanding Context
════════════════════════
𐀪 Author: sh3llwolf
════════════════════════
ⴵ Time: Mon, 04 May 2026 11:34:52 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_vulnerability #pentesting #web_security #owasp
Medium
How I Found XSS by Understanding Context
A real-world walkthrough of methodical thinking over random payload spraying — from reflection discovery to confirmed execution.
10 views
Daily Writeups
⤷ Title: Beyond the Shell: Why I’m Pivoting from Binary Pwn to Web3 Security
════════════════════════
𐀪 Author: Grissia
════════════════════════
ⴵ Time: Mon, 04 May 2026 11:30:21 GMT
════════════════════════
⌗ Tags: #web3 #bug_bounty #blockchain #solidity #smart_contracts
Medium
Beyond the Shell: Why I’m Pivoting from Binary Pwn to Web3 Security
From CTF champion to blockchain security: A journey of rediscovering passion.
11 views
Daily Writeups
⤷ Title: INDONESIAN TEENAGER DISCOVERS XSS VULNERABILITY IN NASA INFRASTRUCTURE ️
DEPOK, INDONESIA — A…
════════════════════════
𐀪 Author: Sector Intelligence
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:16:18 GMT
════════════════════════
⌗ Tags: #hacking #news
Medium
INDONESIAN TEENAGER DISCOVERS XSS VULNERABILITY IN NASA INFRASTRUCTURE 🛡️
DEPOK, INDONESIA — A…
INDONESIAN TEENAGER DISCOVERS XSS VULNERABILITY IN NASA INFRASTRUCTURE 🛡️ DEPOK, INDONESIA — A 14-year-old student from SMP 22 Depok, identified as Langit, has reported a Cross-Site …
10 views
Daily Writeups
⤷ Title: Google said it’s a feature. I’m not so sure. ( allowing full RCE via prompt injection)
════════════════════════
𐀪 Author: Elvinlatifli
════════════════════════
ⴵ Time: Mon, 04 May 2026 11:55:39 GMT
════════════════════════
⌗ Tags: #zero_day_vulnerability #cybersecurity #hacking
Medium
Google said it’s a feature. I’m not so sure. 🤔 ( allowing full RCE via prompt injection)
A few weeks ago, I noticed something interesting in Google’s open-source LLM framework, Langfun. I submitted a report, they reviewed it…
17 views
Daily Writeups
⤷ Title: CTF Basics: Understanding SQLi Data UNIONs
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 04 May 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #hacking #ctf #technology #cybersecurity
Medium
CTF Basics: Understanding SQLi Data UNIONs
Learn how to use UNION-based SQL injection to append attacker-controlled queries, map unknown database schemas, and extract hidden data…
14 views
Daily Writeups
⤷ Title: Cyber Security Monday — The Week in Cyber Security in less than 2 Min…
════════════════════════
𐀪 Author: Jean-Claude Moritz
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:38:24 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #information_security #ransomware #cyber_security_awareness
Medium
🚀 Cyber Security Monday — The Week in Cyber Security in less than 2 Min…
Category: Cyber Security
21 views
Daily Writeups
⤷ Title: From Apache Struts RCE to Full Host Compromise in Kubernetes
════════════════════════
𐀪 Author: Dr. Saket Acharya
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:03:55 GMT
════════════════════════
⌗ Tags: #apache_struts_2 #container_security #apache_struts #penetration_testing #kubernetes_security
Medium
From Apache Struts RCE to Full Host Compromise in Kubernetes
Overview
23 views
Daily Writeups
⤷ Title: TryHackMe SOC Analyst Road Map Part-29
════════════════════════
𐀪 Author: safa kaya
════════════════════════
ⴵ Time: Mon, 04 May 2026 12:30:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme
Medium
TryHackMe SOC Analyst Road Map Part-29
-BURP SUITE-
-BURP SUITE:REPEATER-
Task 1 — Introduction
Bu odada, Burp Suite framework’ünün gelişmiş özelliklerini, özellikle Repeater…
40 views