Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: LFI Prevention: How to Actually Fix File Inclusion Vulnerabilities
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Tue, 05 May 2026 22:10:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #local_file_inclusion #web_security #bug_bounty #penetration_testing
Medium
LFI Prevention: How to Actually Fix File Inclusion Vulnerabilities
From input validation to server hardening — what developers should be doing to prevent LFI from the ground up. Part 7 of the File Inclusion…
22 views
Daily Writeups
⤷ Title: LFI Automated Scanning: Finding and Fuzzing with ffuf
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Tue, 05 May 2026 22:06:03 GMT
════════════════════════
⌗ Tags: #local_file_inclusion #cybersecurity #penetration_testing #web_security #bug_bounty
Medium
LFI Automated Scanning: Finding and Fuzzing with ffuf
Using wordlists and fuzzing tools to automate LFI discovery and server file enumeration. Part 6 of the File Inclusion series.
20 views
Daily Writeups
⤷ Title: Burp Suite MCP Server Won’t Connect from WSL? Here’s the Fix Nobody Talks About
════════════════════════
𐀪 Author: Suyog Patil
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:26:14 GMT
════════════════════════
⌗ Tags: #burpsuite #cybersecurity #claude_code #ai #bug_bounty
Medium
Burp Suite MCP Server Won’t Connect from WSL? Here’s the Fix Nobody Talks About
If you’ve been pulling your hair out trying to connect Claude Code, Gemini CLI, or any AI coding assistant to Burp Suite’s MCP Server from…
15 views
Daily Writeups
⤷ Title: Write for NextGenThreat: Real Stories Only
════════════════════════
𐀪 Author: Faruk Ahmed
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:31:46 GMT
════════════════════════
⌗ Tags: #linux #devops #system_administration #hacking #cybersecurity
Medium
Write for NextGenThreat: Real Stories Only
I’m opening submissions for NextGenThreat.
11 views
Daily Writeups
⤷ Title: One Battle After Another ( A DevOps Engineer’s Fight Against Data Loss)
════════════════════════
𐀪 Author: M Reza Sharifi
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:01:17 GMT
════════════════════════
⌗ Tags: #never_give_up #devops #linux #hacking #file_recovery
Medium
One Battle After Another ( A DevOps Engineer’s Fight Against Data Loss)
There’s a moment every DevOps engineer fears.
12 views
Daily Writeups
⤷ Title: Silencing EDR Network Telemetry: WFP Callout Patching via BYOVD
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:01:12 GMT
════════════════════════
⌗ Tags: #malware #hacking #infosec #pentesting #cybersecurity
Medium
Silencing EDR Network Telemetry: WFP Callout Patching via BYOVD
Welcome to this new Medium post. Today we are going to use kernel read and write primitives to silence EDR network telemetry at the kernel…
22 views
Daily Writeups
⤷ Title: TryHackMe: Brooklyn Nine Nine — Two Paths to Root
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:05:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #steganography #ctf #tryhackme #penetration_testing
Medium
TryHackMe: Brooklyn Nine Nine — Two Paths to Root
Overview
25 views
Daily Writeups
⤷ Title: TryHackMe: Benign | Write-Up
════════════════════════
𐀪 Author: Ash T
════════════════════════
ⴵ Time: Tue, 05 May 2026 21:34:04 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #cybersecurity #tryhackme #information_security
Medium
TryHackMe: Benign | Write-Up
This is a write-up and guide for the Benign room on TryHackMe.
30 views
Daily Writeups
⤷ Title: Guía Definitiva GraphQL para Bug Bounty: Vulnerabilidades y Explotación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 06 May 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #graphql #technology #cybersecurity
Medium
Guía Definitiva GraphQL para Bug Bounty: Vulnerabilidades y Explotación
Domina el hacking de GraphQL: desde el bypass de introspección hasta Mass Assignment y ataques BOLA para Bug Bounty.
31 views
Daily Writeups
⤷ Title: Vulnerability Data Enrichment for CVE Records: 261 CNAs on the Enrichment Recognition List for May…
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Tue, 05 May 2026 23:07:41 GMT
════════════════════════
⌗ Tags: #information_security #infosec #cybersecurity #cyber_security_awareness #vulnerability
Medium
Vulnerability Data Enrichment for CVE Records: 261 CNAs on the Enrichment Recognition List for May…
The “CNA Enrichment Recognition List” for May 4, 2026, is now available with 261 CNAs listed. Published monthly on the CVE website, the…
25 views
Daily Writeups
⤷ Title: Bypassing OTP?
════════════════════════
𐀪 Author: Soumyadip Manna
════════════════════════
ⴵ Time: Wed, 06 May 2026 00:21:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking #otp_bypass #ctf_writeup #linux #cybersecurity
Medium
Bypassing OTP?
Hey guys, this is Soumyadip, Cyber Security Student, CTF player for all time.
31 views
Daily Writeups
⤷ Title: Why I Built a Portfolio for My Open-Source Recon Tool (And You Should Too)
════════════════════════
𐀪 Author: Exreconnaissance
════════════════════════
ⴵ Time: Tue, 05 May 2026 23:36:49 GMT
════════════════════════
⌗ Tags: #roadmaps #exrecon #cybersecurity #portfolio #ethical_hacking
Medium
Why I Built a Portfolio for My Open-Source Recon Tool (And You Should Too)
A clean, interactive home for ExRecon — and the unexpected lessons it taught me about branding in cybersecurity.
33 views
Daily Writeups
⤷ Title: Sauna — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Tue, 05 May 2026 23:19:11 GMT
════════════════════════
⌗ Tags: #pentesting #active_directory #ethical_hacking #hackthebox
Medium
Sauna — HTB Writeup
Introduction:
35 views
Daily Writeups
⤷ Title: Nix Vulnerability Grants Root Access via NAR Parser Overflow
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 02:15:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44028 #cybersecurity #infosec #Linux Security #memory corruption #Nix #NixOS #Patch Alert #privilege escalation #root access #stack overflow
Daily CyberSecurity
Nix Vulnerability Grants Root Access via NAR Parser Overflow
A critical 7.5 CVSS flaw in Nix (CVE-2026-44028) allows standard users to gain root privileges via a stack overflow. Update your Nix installation immediately!
33 views
Daily Writeups
⤷ Title: GitOps Security Breach: Critical 9.6 CVSS Argo CD Flaw Exposes Plaintext Kubernetes Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 02:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argo CD #cloud_native #CVE_2026_42880 #cybersecurity #data leak #GitOps #infosec #Kubernetes #Kubernetes Secrets #Patch Alert #Server_Side Diff
Daily CyberSecurity
GitOps Security Breach: Critical 9.6 CVSS Argo CD Flaw Exposes Plaintext Kubernetes Secrets
A critical 9.6 CVSS flaw in Argo CD (CVE-2026-42880) allows read-only users to extract plaintext Kubernetes secrets via Server-Side Diffs. Patch to v3.3.9 now!
28 views
Daily Writeups
⤷ Title: Exploited in the Wild: Critical PAN-OS Buffer Overflow Grants Root Access to Palo Alto Firewalls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:42:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #buffer overflow #captive portal #CVE_2026_0300 #cybersecurity #firewall security #infosec #Palo Alto Networks #PAN_OS #Patch Alert #Root RCE #zero_day
Daily CyberSecurity
Exploited in the Wild: Critical PAN-OS Buffer Overflow Grants Root Access to Palo Alto Firewalls
Palo Alto Networks confirms CVE-2026-0300 is being exploited in the wild. The 9.3 CVSS flaw allows unauthenticated root RCE. Secure your PAN-OS firewalls now!
24 views
Daily Writeups
⤷ Title: 5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:33:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26956 #CVSS 9.8 #infosec #JavaScript Security #Node.js #Patch Alert #rce #Sandbox Escape #V8 Engine #vm2 #WebAssembly
Daily CyberSecurity
5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
Critical 9.8 CVSS flaws in vm2 affect 5.7M monthly users, allowing RCE via WASM and Promise bypasses. Upgrade to vm2 v3.11.0 immediately to secure your host.
22 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: Fundamental Cybersecurity: Fondasi Keamanan Digital yang Wajib Dipahami Pemula
════════════════════════
𐀪 Author: Omar Justice Prasetyo
════════════════════════
ⴵ Time: Wed, 06 May 2026 02:41:33 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #computer_science #ethical_hacking #cybersecurity
Medium
Fundamental Cybersecurity: Fondasi Keamanan Digital yang Wajib Dipahami Pemula
Sebelum belajar ethical hacking atau forensik digital, ada fondasi yang harus kokoh dulu. Ini dia konsep-konsep dasar cybersecurity yang…
30 views
Daily Writeups
⤷ Title: Ngoding Full AI Emang Chill, Sampai Akhirnya Sadar Lagi ‘Open House’ API Key
════════════════════════
𐀪 Author: Muhammad Yanuar Andrianto Putra
════════════════════════
ⴵ Time: Wed, 06 May 2026 02:49:48 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #software_development #api_security #cybersecurity
Medium
Ngoding Full AI Emang Chill, Sampai Akhirnya Sadar Lagi ‘Open House’ API Key
Bayangkan skenario ini. Kamu lagi dalam flow state terbaik dalam hidupmu sebagai developer. Copilot nulisin boilerplate, ChatGPT bantu…
40 views
Daily Writeups
⤷ Title: Trojanized Tools: DAEMON Tools Supply Chain Attack Compromises Global Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 03:15:45 +0000
════════════════════════
⌗ Tags: #Malware #China_nexus APT #cybersecurity #DAEMON Tools #Digital Certificates #DTHelper.exe #Espionage #infosec #kaspersky #malware #QUIC RAT #supply chain attack
Daily CyberSecurity
Trojanized Tools: DAEMON Tools Supply Chain Attack Compromises Global Systems
Kaspersky warns that DAEMON Tools installers (v12.5) are trojanized with the QUIC RAT. Signed binaries are being used for global espionage. Update and audit now!
36 views