Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 06 May 2026 20:02:52 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Google #Cybersecurity #Gemini CLI #GitHub #Pillar Security #RCE #Technology #Vulnerability
Hackread
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise.
25 views
Daily Writeups
⤷ Title: Automating High-Risk Database Info Disclosure via GraphQL Misconfiguration
════════════════════════
𐀪 Author: m00nissmiling
════════════════════════
ⴵ Time: Wed, 06 May 2026 20:25:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development #cybersecurity #graphql #pentesting
Medium
Automating High-Risk Database Info Disclosure via GraphQL Misconfiguration
Let's automate the graphql misconfiguration using this tool !
14 views
Daily Writeups
⤷ Title: 1.5 Million Websites Got Hacked in 2026 — And Most Owners Still Don’t Know
════════════════════════
𐀪 Author: Jazz Cyber Shield
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:57:38 GMT
════════════════════════
⌗ Tags: #hacking #web_hosting #cybersecurity #technology
Medium
1.5 Million Websites Got Hacked in 2026 — And Most Owners Still Don’t Know
Your hosting panel has a hole so wide that attackers walked in months before anyone noticed. Here’s what happened, and what you must do…
12 views
Daily Writeups
⤷ Title: Critical Apache HTTP Server Flaw CVE-2026–23918 — DoS and RCE With Two HTTP/2 Frames. Patch Now.
════════════════════════
𐀪 Author: Sai kiran
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:37:18 GMT
════════════════════════
⌗ Tags: #vulnerability #infosec #apache #cybersecurity #web_security
Medium
Critical Apache HTTP Server Flaw CVE-2026–23918 — DoS and RCE With Two HTTP/2 Frames. Patch Now.
CVSS 8.8. One TCP connection. Two crafted HTTP/2 frames. No authentication. Worker process crashed. And in the right conditions — full…
12 views
Daily Writeups
⤷ Title: Critical Apache HTTP Server RCE and DoS Vulnerability (CVE-2026–23918)
════════════════════════
𐀪 Author: RealSec.io
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:26:43 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #infosec
Medium
Critical Apache HTTP Server RCE and DoS Vulnerability (CVE-2026–23918)
The Apache Software Foundation has just released a critical security update addressing an important flaw (CVE-2026–23918) impacting the…
22 views
Daily Writeups
⤷ Title: Understanding Darknet Drug Scams: Why Visibility Does Not Equal Trust
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:13:02 GMT
════════════════════════
⌗ Tags: #osint #darkweb #cybersecurity #infosec
Medium
Understanding Darknet Drug Scams: Why Visibility Does Not Equal Trust
Discussions about darknet drug scams often focus on obvious fraud. However, the more useful lesson is how trust gets created in anonymous…
12 views
Daily Writeups
⤷ Title: API Pen Testing : Zero to Hero Hands on Labs
════════════════════════
𐀪 Author: Vaibhav
════════════════════════
ⴵ Time: Wed, 06 May 2026 20:01:01 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #owasp_api_security_top_10 #web_security #penetration_testing #cybersecurity
Medium
API Pen Testing : Zero to Hero Hands on Labs
1. Introduction
14 views
Daily Writeups
⤷ Title: A Beginner’s Step‑by‑Step Simplified Guide to Mastering Nmap Scans
════════════════════════
𐀪 Author: Cybersectoworld
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:34:42 GMT
════════════════════════
⌗ Tags: #nmap #cybersecurity #ethical_hacking #penetration_testing
Medium
A Beginner’s Step‑by‑Step Simplified Guide to Mastering Nmap Scans
Nmap (Network Mapper) is one of the most powerful tools in cybersecurity. Beginners often see complex commands and feel lost. The goal here…
12 views
Daily Writeups
⤷ Title: Extending Your Network
════════════════════════
𐀪 Author: Stacy Sirbu
════════════════════════
ⴵ Time: Wed, 06 May 2026 20:22:57 GMT
════════════════════════
⌗ Tags: #networking #tutorial #tryhackme_writeup #tryhackme_walkthrough #tryhackme
Medium
Extending Your Network
Learn about some of the technologies used to extend networks out onto the Internet and the motivations for this.
12 views
Daily Writeups
⤷ Title: Packets & Frames
════════════════════════
𐀪 Author: Stacy Sirbu
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:54:04 GMT
════════════════════════
⌗ Tags: #tryhackme #tutorial #tryhackme_writeup #tryhackme_walkthrough #networking
Medium
Packets & Frames
Understand how data is divided into smaller pieces and transmitted across a network to another device.
15 views
Daily Writeups
⤷ Title: Active Reconnaissance: TryHackMe Walkthrough
════════════════════════
𐀪 Author: catle09
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:07:56 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #md_shahid_hasan #active_reconnaissance #cybersecurity #tryhackme
Medium
Active Reconnaissance: TryHackMe Walkthrough
Task 2: Web Browser:
21 views
Daily Writeups
⤷ Title: Interceptor | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 06 May 2026 19:06:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #mfa #command_injection #tryhackme
Medium
Interceptor | TryHackMe | Walkthrough
What is the flag value after logging in as admin?
31 views
Daily Writeups
⤷ Title: Best OSINT Tools for Investigations and Threat Intelligence in 2026
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:53:53 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Maltego #OSINT #OSINT Framework #ShadowDragon #Shodan #Telegago #Threat Intelligence #VenariX
Hackread
Best OSINT Tools for Investigations and Threat Intelligence in 2026
Explore the best OSINT tools for your digital investigations, threat intelligence, reconnaissance, and tracking online activity in 2026.
23 views
Daily Writeups
⤷ Title: The Recon Goldmine Hidden Inside Exposed AI Instruction Files
════════════════════════
𐀪 Author: Nijin K
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:51:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #cyber_security_awareness #bug_bounty #bugs
Medium
The Recon Goldmine Hidden Inside Exposed AI Instruction Files
Most bug hunters know the usual low-hanging fruits:
17 views
Daily Writeups
⤷ Title: How to Build a World-Class SAST Program from Scratch
════════════════════════
𐀪 Author: Vikrant Waghmode
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:44:00 GMT
════════════════════════
⌗ Tags: #semgrep #application_security #cybersecurity #static_code_analysis
Medium
How to Build a World-Class SAST Program from Scratch
A practitioner’s guide to transforming static analysis security testing — from creating the vision to selecting the right tools through…
12 views
Daily Writeups
⤷ Title: Write for NextGenThreat: Real Stories Only
════════════════════════
𐀪 Author: Faruk Ahmed
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:36:49 GMT
════════════════════════
⌗ Tags: #devops #linux_sysadmin #linux #cybersecurity #hacking
Medium
Write for NextGenThreat: Real Stories Only
I’m opening submissions for NextGenThreat.
14 views
Daily Writeups
⤷ Title: SQL Injection Demystified: From Magic Passwords to Out-of-Band Exfiltration (Part 1)
════════════════════════
𐀪 Author: RedVoid
════════════════════════
ⴵ Time: Wed, 06 May 2026 22:06:01 GMT
════════════════════════
⌗ Tags: #infosec #web_security #information_security #sql_injection
Medium
SQL Injection Demystified: From Magic Passwords to Out-of-Band Exfiltration (Part 1)
A complete guide covering major SQL injection techniques
23 views
Daily Writeups
⤷ Title: When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
════════════════════════
𐀪 Author: Yeboahromeo
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:33:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #webapp_security #cybersecurity
Medium
When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
Authentication systems are supposed to protect users, especially privileged accounts like administrators. Among the most trusted security…
24 views
Daily Writeups
⤷ Title: STACK-BASED BUFFER OVERFLOW EXPLOITATION
════════════════════════
𐀪 Author: Eilipkarki
════════════════════════
ⴵ Time: Wed, 06 May 2026 22:08:36 GMT
════════════════════════
⌗ Tags: #reverse_engineering #binary_exploitation #cybersecurity #ethical_hacking
Medium
STACK-BASED BUFFER OVERFLOW EXPLOITATION
Security Evaluation of the “space” Binary
25 views
Daily Writeups
⤷ Title: How I pwend my high school CS teacher
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Thu, 07 May 2026 00:44:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #computer_science #django #bug_bounty #web_security
Medium
How I pwend my high school CS teacher
I was never a good student. I didn’t like doing something just because I was told to — I needed to understand why, and if it didn’t tickle…
24 views
Daily Writeups
⤷ Title: HTB File Inclusion Skills Assessment — From LFI to RCE (Full Walkthrough)
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Wed, 06 May 2026 23:46:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing #local_file_inclusion #bug_bounty
Medium
HTB File Inclusion Skills Assessment — From LFI to RCE (Full Walkthrough)
How I chained LFI, source code disclosure, and a broken file upload to get full remote code execution. Final part of the File Inclusion…
17 views