Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Cloudflare Under Fire as “Beamed” Service Cripples Ubuntu’s Global Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:49:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #313 Team #Beamed #Booter Service #BOTNET #Canonical #Cloudflare #Cybersecurity 2026 #DDOS attack #Infrastructure Defense #Islamic Cyber Resistance in Iraq #Linux Security #ubuntu
Penetration Testing Tools
Cloudflare Under Fire as "Beamed" Service Cripples Ubuntu’s Global Infrastructure
Ubuntu services have endured several days of tumultuous disruptions due to a formidable assault, and a fresh controversy
13 views
Daily Writeups
⤷ Title: Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:24:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automated Scanning #China Cyber Security #CMS Security #CVE_2026_29014 #Cyber attack 2026 #MetInfo #PHP Code Injection #RCE #remote code execution #VulnCheck #zero_day
Penetration Testing Tools
Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
A zero-day vulnerability residing within the Chinese content management system MetInfo has entered a phase of active exploitation
6 views
Daily Writeups
⤷ Title: Dragon Breath’s Leaked Driver Shatters Windows Security and Neutralizes EDRs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:13:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT_Q_27 #APT31 #BYOVD #CrowdStrike #Cyber Espionage #Dragon Breath #dragoncore_k.sys #EDR Bypass #Kernel Driver #Malware 2026 #Microsoft Defender #SentinelOne #Zhengzhou 403
Penetration Testing Tools
Dragon Breath’s Leaked Driver Shatters Windows Security and Neutralizes EDRs
The Chinese cyber-espionage collective Dragon Breath, also recognized by the designation APT-Q-27, has purportedly acquired a formidable new
10 views
Daily Writeups
⤷ Title: BO Team’s Pivot to High-Stakes Industrial Espionage and the ZeroSSH Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:04:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BO Team #BrockenDoor #Cyber Espionage #Head Mare #Industrial Cybersecurity #kaspersky #Oil and Gas Security #Russian Infrastructure #Spear Phishing #threat intelligence #ZeronetKit #ZeroSSH
Penetration Testing Tools
BO Team’s Pivot to High-Stakes Industrial Espionage and the ZeroSSH Threat
Over the past year, BO Team has significantly recalibrated its approach to incursions against Russian organizations. The syndicate
11 views
Daily Writeups
⤷ Title: Omani Government Targeted in Blatant Iranian-Nexus Cyberespionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 12:20:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Data Leak #APT34 #cybersecurity #Data Breach #Hunt Intelligence #infosec #Iran APT #Middle East Security #MuddyWater #OilRig #Oman MJLA #UAE VPS #webshell
Daily CyberSecurity
Omani Government Targeted in Blatant Iranian-Nexus Cyberespionage
Hunt Intelligence uncovers a massive Iranian-nexus breach targeting the Omani Ministry of Justice. 26k records leaked via an unprotected UAE staging server.
14 views
Daily Writeups
⤷ Title: Cisco Unity Connection Flaws Enable Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 12:01:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cisco #Cisco Unity Connection #CVE_2026_20034 #CVE_2026_20035 #cybersecurity #infosec #network_security #Patch Alert #rce #Remote Code Execution #root access #ssrf
Daily CyberSecurity
Cisco Unity Connection Flaws Enable Full System Takeover
Cisco warns of critical RCE (CVE-2026-20034) and SSRF flaws in Unity Connection. Authenticated root access and unauthenticated network probing are possible. Patch now!
10 views
Daily Writeups
⤷ Title: ️Full Account Takeover Through Unsafe Google Linking With Permanent Loss of Access for the Victim
════════════════════════
𐀪 Author: 0xMo7areb
════════════════════════
ⴵ Time: Thu, 07 May 2026 11:27:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #bug_bounty_tips #bug_bounty_writeup #pentesting
Medium
🕸️Full Account Takeover Through Unsafe Google Linking With Permanent Loss of Access for the Victim
الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعد
14 views
Daily Writeups
⤷ Title: BUG-BOUNTY SERIES 12: Cross-Site Request Forgery (CSRF).
════════════════════════
𐀪 Author: Krisna Wahyu Andriawan
════════════════════════
ⴵ Time: Thu, 07 May 2026 11:11:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #linux
Medium
BUG-BOUNTY SERIES 12: Cross-Site Request Forgery (CSRF). Mengeksploitasi Kepercayaan Aplikasi terhadap Sesi Pengguna
Setelah pada Series 11 kita membahas Cross-Site Scripting (XSS) yang berfokus pada eksekusi script di sisi client, pada series ini kita…
21 views
Daily Writeups
⤷ Title: 10 signs of a cheating husband
════════════════════════
𐀪 Author: Michael Parks
════════════════════════
ⴵ Time: Thu, 07 May 2026 12:50:05 GMT
════════════════════════
⌗ Tags: #hacking #cheating #infidelity_in_marriage #infidelity #affairs
Medium
10 signs of a cheating husband
INFIDELITY
20 views
Daily Writeups
⤷ Title: CTF Basics: Understanding SQLi Blind Injection
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 07 May 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #ctf #technology #cybersecurity #hacking
Medium
CTF Basics: Understanding SQLi Blind Injection
Learn how blind SQL injection works, how to extract data using boolean conditions and time delays, and how to automate extraction in CTF…
26 views
Daily Writeups
⤷ Title: Popular Darknet Drugs and What Online Visibility Actually Reveals
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Thu, 07 May 2026 12:17:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #osint #darkweb
Medium
Popular Darknet Drugs and What Online Visibility Actually Reveals
Discussions about popular darknet drugs often focus on names or categories. However, the more useful question is why certain substances…
27 views
Daily Writeups
⤷ Title: When the Frontend Lies: How One Blind API Endpoint Could Bring Down Your Entire Company
════════════════════════
𐀪 Author: Mostafa Waleed
════════════════════════
ⴵ Time: Thu, 07 May 2026 13:00:05 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty #penetration_testing #bug_bounty_tips #information_security
Medium
When the Frontend Lies: How One Blind API Endpoint Could Bring Down Your Entire Company
When the Frontend Lies: How One Blind API Endpoint Could Bring Down Your Entire Company Imagine you’re a regular employee at a company. Your HR account has one permission: editing your work email …
38 views
Daily Writeups
⤷ Title: One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breaches
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 07 May 2026 19:20:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 07 May 2026 19:04:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Under Active Attack: Ivanti EPMM Zero-Day Exploited in the Wild via Harvested Admin Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:47:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Apple Device Enrollment #CVE_2026_6973 #CVE_2026_7821 #cybersecurity #EPMM #infosec #Ivanti #mobile security #MobileIron #Patch Alert #zero_day
Daily CyberSecurity
Under Active Attack: Ivanti EPMM Zero-Day Exploited in the Wild via Harvested Admin Credentials
Ivanti confirms active exploitation of EPMM (CVE-2026-6973). Attackers are using old credentials to hijack mobile management. Patch to v12.8.0.1 immediately!
30 views
Daily Writeups
⤷ Title: Beware of Fake Claude AI pro Websites: How Impersonation Scams Install Malware on Your PC
════════════════════════
𐀪 Author: Nina
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:27:59 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #scam #hacking #ai #cybersecurity
Medium
Beware of Fake Claude AI pro Websites: How Impersonation Scams Install Malware on Your PC
Fake websites mimicking popular AI tools like Claude, Grok, or ChatGPT are surging in 2026. These scams trick users into downloading…
16 views
Daily Writeups
⤷ Title: picoCTF 2026 (Web Exploitation)
════════════════════════
𐀪 Author: Dipu Basak
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:11:46 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #cybersecurity #ctf_writeup #picoctf #hacking
Medium
picoCTF 2026 (Web)
picoCTF 2026 (Web) picoCTF 2026 was full of amazing challenges. Let’s tackle the web exploitation challenges today. Let’s see how we can fool a server, gather exposed sensitive information to …
12 views
Daily Writeups
⤷ Title: [FORECAST] Device-Bound Sessions Are Coming. Defaults Are the Hard Part.
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:46:01 GMT
════════════════════════
⌗ Tags: #identity #infosec #threat_intelligence #cybersecurity
Medium
[FORECAST] Device-Bound Sessions Are Coming. Defaults Are the Hard Part.
“Secure by default” is a beautiful phrase until it meets the average enterprise.
18 views
Daily Writeups
⤷ Title: Simple CTF — TryHackMe WalkThrough
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Thu, 07 May 2026 13:24:37 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme_walkthrough #tryhackme #cybersecurity #tryhackme_writeup
Medium
Simple CTF — TryHackMe WalkThrough
Simple CTF — TryHackMe WalkThrough Date: 20/08/2025 Room Link: https://tryhackme.com/room/easyctf My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this write-up, I demonstrate …
21 views
Daily Writeups
⤷ Title: Network Services 2 — THM
════════════════════════
𐀪 Author: Fadybasem - ( SilentN0va )
════════════════════════
ⴵ Time: Thu, 07 May 2026 13:05:48 GMT
════════════════════════
⌗ Tags: #silentn0va #tryhackme #security #cybersecurity #networking
Medium
Network Services 2 — THM
NFS (Network File System)
26 views
Daily Writeups
⤷ Title: Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
════════════════════════
𐀪 Author: DAC
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:17:46 GMT
════════════════════════
⌗ Tags: #chrome_extension #twitter #typescript #tools #xs
Medium
Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
If you use X (formerly Twitter) in a serious way — for work, tech, or market watching — you’ve probably had this experience:
37 views