Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: I Built a Recon Tool That Runs While I Sleep. Meet Wraith.
════════════════════════
𐀪 Author: Voldemort
════════════════════════
ⴵ Time: Sun, 10 May 2026 09:40:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #automation #python #cybersecurity #ethical_hacking
Medium
I Built a Recon Tool That Runs While I Sleep. Meet Wraith. 👻
I got tired of being glue between recon tools, so I built Wraith: runs while you sleep, crash-safe, resumable, outputs organized results.
18 views
Daily Writeups
⤷ Title: How NFC Works in Android: Hidden Architecture and Real Security Risks
════════════════════════
𐀪 Author: Afi0pchik
════════════════════════
ⴵ Time: Sun, 10 May 2026 09:13:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #android_security #binary_exploitation #android
Medium
How NFC Works in Android: Hidden Architecture and Real Security Risks
Hi, in this article we are going to look at NFC vulnerabilities not as “wireless magic hacks”, but as a real Android system problem hidden…
16 views
Daily Writeups
⤷ Title: CISSP Chapter 2 — Part 2: Risk Is Not a Threat. It Is a Relationship.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Sun, 10 May 2026 09:41:24 GMT
════════════════════════
⌗ Tags: #leadership #nist_framework #cissp #cybersecurity #infosec
Medium
CISSP Chapter 2 — Part 2: Risk Is Not a Threat. It Is a Relationship.
Assets, threat actors, vulnerabilities, exposure, control selection, and the management judgment that turns risk theory into security…
20 views
Daily Writeups
⤷ Title: TryHackMe | Intro to AD Authentication | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Sun, 10 May 2026 09:39:16 GMT
════════════════════════
⌗ Tags: #active_directory #cybersecurity #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe | Intro to AD Authentication | WriteUp
Examine how AD authentication works and the various protocols it uses.
17 views
Daily Writeups
⤷ Title: Oopsie [HTB]
════════════════════════
𐀪 Author: ColdLogic7
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:03:44 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_walkthrough #hackthebox_writeup
Medium
Oopsie [HTB]
I’ll be honest — I hit a wall on this one. After exploring the “multiverse” of Robert’s home directory, I had to turn to Google to find the…
31 views
Daily Writeups
⤷ Title: Lab: Exploiting AI agents to perform destructive actions
════════════════════════
𐀪 Author: Emman Cajucom
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:51:09 GMT
════════════════════════
⌗ Tags: #portswigger_lab #ethical_hacking #web_security_academy
Medium
Lab: Exploiting AI agents to perform destructive actions
By: Emmanuel Cajucom
36 views
Daily Writeups
⤷ Title: Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sun, 10 May 2026 18:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Zero Installation, Total Compromise: Critical Grav CMS Exploit Chain Grants Unauthenticated RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:32:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42607 #CVE_2026_42613 #cybersecurity #Grav CMS #infosec #Patch Alert #privilege escalation #rce #Remote Code Execution #Threat Intel #Web Security
Daily CyberSecurity
Zero Installation, Total Compromise: Critical Grav CMS Exploit Chain Grants Unauthenticated RCE
Protect your Grav CMS deployments. Attackers are chaining CVE-2026-42613 and CVE-2026-42607 to achieve unauthenticated remote code execution. Patch today!
29 views
Daily Writeups
⤷ Title: SIEM Correlation Cheatsheet: 15 Rule Examples for Rapid Threat Detection
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:46:49 GMT
════════════════════════
⌗ Tags: #siem #hacking #cybersecurity #bug_bounty #penetration_testing
Medium
SIEM Correlation Cheatsheet: 15 Rule Examples for Rapid Threat Detection
Ever seen an attacker slip past all your logs — leaving only a faint fingerprint behind? You’re not alone. SIEMs are powerful, but they’re…
18 views
Daily Writeups
⤷ Title: Faster Bug Hunting with XSSassin : Smart Payload Injection for XSS, SQLi & More
════════════════════════
𐀪 Author: mayank mani tripathi
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:46:00 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #devsecops #bug_bounty #sql_injection
Medium
Faster Bug Hunting with XSSassin : Smart Payload Injection for XSS, SQLi & More
A powerful Chrome extension designed for bug bounty hunters to automate and enhance manual vulnerability discovery in web applications.
35 views
Daily Writeups
⤷ Title: Release Decisions as Audit Evidence
════════════════════════
𐀪 Author: André Ataíde
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:20:49 GMT
════════════════════════
⌗ Tags: #software_release #application_security #risk_management #grc #supply_chain_security
Medium
Release Decisions as Audit Evidence
Securing ‘The Chain of Custody’ in Software Releases. Yes, you read that right.
18 views
Daily Writeups
⤷ Title: NEWS: The 9-Second Production Wipe - An AI Agent Incident
════════════════════════
𐀪 Author: Tugan Atila
════════════════════════
ⴵ Time: Fri, 08 May 2026 13:39:15 GMT
════════════════════════
⌗ Tags: #database #technology #application_security #cybersecurity #ai
Medium
NEWS: The 9-Second Production Wipe - An AI Agent Incident
This one is going to make a lot of engineers pause.
15 views
Daily Writeups
⤷ Title: Signs that wife has cheated
════════════════════════
𐀪 Author: Michael Parks
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:43:57 GMT
════════════════════════
⌗ Tags: #infidelity #hacking #cheating #marriage #love
Medium
Signs that wife has cheated
30 Physical Signs Your Wife Is Cheating on You
13 views
Daily Writeups
⤷ Title: Covert Acces Training — More Than Lockpicking: My Experience With Physical Hacking
════════════════════════
𐀪 Author: Jordi Been
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:18:03 GMT
════════════════════════
⌗ Tags: #hacking #covert_access_training #security #black_team_operations #physical_pentest
Medium
Covert Acces Training — More Than Lockpicking: My Experience With Physical Hacking
Recently, I had the opportunity to attend an intensive five-day physical hacking training, and honestly, it was far from your typical “open…
17 views
Daily Writeups
⤷ Title: Sauna — HackTheBox Walkthrough
════════════════════════
𐀪 Author: Abdallah_samir
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:58:02 GMT
════════════════════════
⌗ Tags: #active_directory #hackthebox #ctf #pentesting #hacking
Medium
Sauna — HackTheBox Walkthrough
Reconnaissance
10 views
Daily Writeups
⤷ Title: The Best Bug Bounty Skill Isn’t Hacking… It’s Pattern Recognition
════════════════════════
𐀪 Author: Arfa
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:01:05 GMT
════════════════════════
⌗ Tags: #programming #ethical_hacking #hacking #cybersecurity #machine_learning
Medium
The Best Bug Bounty Skill Isn’t Hacking… It’s Pattern Recognition
How I started finding vulnerabilities faster without learning new exploits
17 views
Daily Writeups
⤷ Title: Back to Basics: Cybersecurity, Information Security vs Cybersecurity (and the CIA Triad Explained)
════════════════════════
𐀪 Author: LEVI
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:53:05 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #penetration_testing #cybersecurity #cia_triad
Medium
Back to Basics: Cybersecurity, Information Security vs Cybersecurity (and the CIA Triad Explained)
What if I told you that most beginners in cybersecurity are confused about one of the most fundamental concepts in the field?
13 views
Daily Writeups
⤷ Title: Exploiting AI Agents to Exfiltrate Sensitive Information — PortSwigger’s Web Security Academy Labs…
════════════════════════
𐀪 Author: Axel Rengstorf
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:52:57 GMT
════════════════════════
⌗ Tags: #portswigger #ai #penetration_testing #llm #information_security
Medium
Exploiting AI Agents to Exfiltrate Sensitive Information — PortSwigger’s Web Security Academy Labs on WebLLM Security
This time it took one comment. Here’s why.
17 views
Daily Writeups
⤷ Title: Why Enterprise Clients Reject Weak Pentest Reports
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:48:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #saas_security #cloud_security #penetration_testing #api_security
Medium
Why Enterprise Clients Reject Weak Pentest Reports
Enterprise buyers are getting harder to convince.
17 views
Daily Writeups
⤷ Title: Attacktive Directory: A Hands-On Walkthrough of AD Exploitation
════════════════════════
𐀪 Author: Dakshdhamija
════════════════════════
ⴵ Time: Sun, 10 May 2026 12:38:10 GMT
════════════════════════
⌗ Tags: #tryhackme #kerberos_authentication #active_directory #cybersecurity
Medium
Attacktive Directory: A Hands-On Walkthrough of AD Exploitation
Concepts Learned: Understanding Active Directory (AD):
11 views