Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Real Hunting & Operator Tactics — What This Series Will Actually Teach You
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:12:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #security #bug_bounty #hacking
Medium
🧠 Real Hunting & Operator Tactics — What This Series Will Actually Teach You
Read Here …
9 views
Daily Writeups
⤷ Title: Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
════════════════════════
𐀪 Author: Sai
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:02:20 GMT
════════════════════════
⌗ Tags: #insecure_deserialization #oracle_weblogic_server #vulnerability #application_security #remote_code_execution
Medium
Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
Overview
10 views
Daily Writeups
⤷ Title: Putin Never Wanted This to Leak: One of Russia’s Deepest Intelligence Secrets Just Cracked Open
════════════════════════
𐀪 Author: Emily Rhodes
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:48:52 GMT
════════════════════════
⌗ Tags: #war #hacking #ukraine_war #geopolitics
Medium
Putin Never Wanted This to Leak: One of Russia’s Deepest Intelligence Secrets Just Cracked Open
Russia’s Secret Hacker University Exposed
11 views
Daily Writeups
⤷ Title: Canvas LMS Hack 2026: Universities Worldwide Hit by Massive Cyberattack During Finals Week
════════════════════════
𐀪 Author: Biplove Yadav
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:21:30 GMT
════════════════════════
⌗ Tags: #canvas #edutech #cyberattack #technews #hacking
Medium
Canvas LMS Hack 2026: Universities Worldwide Hit by Massive Cyberattack During Finals Week
Students across the United States, Australia, Canada, and Europe woke up this week to a nightmare scenario: Canvas LMS was down.
11 views
Daily Writeups
⤷ Title: Two new Linux Privilege Escalation: Electric Boogaloo and Dirty Frag
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:37:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #vulnerability #linux
Medium
Two new Linux Privilege Escalation: Electric Boogaloo and Dirty Frag
Security researchers found two more serious LPE vulnerabilities in Linux: Copy Fail 2: Electric Boogaloo and Dirty Frag.
15 views
Daily Writeups
⤷ Title: CISSP Chapter 2 — Part 1: People Are Not the Weakest Link. Unmanaged Trust Is.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:05:11 GMT
════════════════════════
⌗ Tags: #cissp #cybersecurity #infosec #cyber_security_awareness #isc2
Medium
CISSP Chapter 2 — Part 1: People Are Not the Weakest Link. Unmanaged Trust Is.
Personnel security, role clarity, onboarding discipline, offboarding rigor, and the governance choices that shape human risk.
13 views
Daily Writeups
⤷ Title: Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
════════════════════════
𐀪 Author: Farras Fauzan
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:40:27 GMT
════════════════════════
⌗ Tags: #infosec #soc #wazuh #automation #cybersecurity
Medium
Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
Technical integration is only half the battle. Discover how to design targeted automation logic for a faster, smarter incident response
18 views
Daily Writeups
⤷ Title: Windows CLI Basics — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:24:47 GMT
════════════════════════
⌗ Tags: #tryhackme_pre_security #windows #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
Windows CLI Basics — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Windows CLI Basics
Room URL: https://tryhackme.com/room/windowsclibasics
Difficulty: Easy
Please attempt the room…
18 views
Daily Writeups
⤷ Title: TryHackMe (THM) PickleRick Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:47:05 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #pickle_rick #tryhackme_walkthrough #rick_and_morty #tryhackme
Medium
TryHackMe (THM) PickleRick Walkthrough
🔗Room Link : https://tryhackme.com/room/picklerick
34 views
Daily Writeups
⤷ Title: Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:28:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #windows_vulnerability #ldap #active_directory #kerberos_delegation
Medium
Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
In penetration testing, the path to domain administrator privileges often involves a complex chain of exploitation, requiring a deep…
39 views
Daily Writeups
⤷ Title: One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 14:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:13:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI security #Blue Team Automation #Claude Code #Detection Engineering #DevSecOps #Elastic Security #Fawkes C2 #MITRE ATT&CK #SIEM #Sigma Rules #Splunk #Threat Intel
Penetration Testing Tools
The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
Deploy an AI-powered detection pipeline using Claude Code. Automate the full SIEM lifecycle, from Sigma rule authoring to MITRE ATT&CK validation and tuning.
28 views
Daily Writeups
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views
Daily Writeups
⤷ Title: Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ABW #Critical Infrastructure #Cyber Espionage #Cyber War 2026 #ICS #Industrial Control Systems #Infrastructure Defense #Jabłonna Lacka #National Security #Poland #Szczytno #Water Treatment Security
Penetration Testing Tools
Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
Polish intelligence services have issued a somber warning regarding a succession of incursions targeting water treatment facilities, where,
12 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views
Daily Writeups
⤷ Title: North Korean “Laptop Farms” Infiltrated 70 U.S. Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:13:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #corporate espionage #cybersecurity #DPRK #Erick Prince #fbi #Insider Threat #Justice Department #Laptop Farm #Matthew Knoot #North Korea #Remote Desktop #Stolen Identity
Daily CyberSecurity
North Korean "Laptop Farms" Infiltrated 70 U.S. Companies
DOJ sentences U.S. enablers for running North Korean "laptop farms." Learn how the DPRK breached 70 companies and funded weapons via stolen identities.
12 views
Daily Writeups
⤷ Title: Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:59 +0000
════════════════════════
⌗ Tags: #Malware #.NET Security #AppBound Bypass #CI/CD security #cybersecurity #DevSecOps #infosec #IR.* Packages #malware #NuGet #supply chain attack
Daily CyberSecurity
Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
Critical alert: A stealth NuGet supply chain attack has hijacked 65,000 .NET workstations. Audit your CI/CD for malicious IR.* packages immediately.
17 views
Daily Writeups
⤷ Title: When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:52:18 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #documentation #bug_bounty #cloudflare
Medium
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
Bug bounty hunting is exciting.
15 views
Daily Writeups
⤷ Title: How a YouTube Recommendation Led Me to Claim Free Coins Twice
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:25:57 GMT
════════════════════════
⌗ Tags: #web_security #race_condition #penetration_testing #application_security #bug_bounty
Medium
How a YouTube Recommendation Led Me to Claim Free Coins Twice
It was a random Monday. Nothing special going on. YouTube decided to recommend me a video about abusing game economy endpoints and I…
21 views
Daily Writeups
⤷ Title: Broken Access Control / IDOR in Group Invitation Flow
════════════════════════
𐀪 Author: Ahmed Atef (0xMintsX)
════════════════════════
ⴵ Time: Fri, 08 May 2026 01:24:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #access_control #cybersecurity #web_application_security #api_security
Medium
خلل في التحكم بالوصول / IDOR في تدفق دعوة المجموعة
{وَآتَاكُم م كُلِّ مَا سَأَلْتُمُوهُ ۚ وَإِن تَعُدُّوا نِعْمَتَ اللَّهِ لا تُحْصُوهُ ۗ }
21 views