Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Penetration Testing Report: VulnBank API and Web Application
════════════════════════
𐀪 Author: Immanuel Samuel
════════════════════════
ⴵ Time: Tue, 12 May 2026 20:04:11 GMT
════════════════════════
⌗ Tags: #penetration_testing #burpsuite #technology #cybersecurity #web_development
Medium
Penetration Testing Report: VulnBank API and Web Application
This report details the findings from the penetration testing engagement against the VulnBank application. The assessment identified…
21 views
Daily Writeups
⤷ Title: The Silent Hijack: Unmasking the Top LLM Vulnerabilities of 2026 and the Escalating Threat to…
════════════════════════
𐀪 Author: Medofekry
════════════════════════
ⴵ Time: Tue, 12 May 2026 19:24:36 GMT
════════════════════════
⌗ Tags: #llm #security #penetration_testing #vulnerability #ai
Medium
The Silent Hijack: Unmasking the Top LLM Vulnerabilities of 2026 and the Escalating Threat to…
The Silent Hijack: Unmasking the Top LLM Vulnerabilities of 2026 and the Escalating Threat to Enterprise Security
25 views
Daily Writeups
⤷ Title: Hunt Me I: Payment Collectors-TryHackMe Writeup
════════════════════════
𐀪 Author: Nway Nway Zay Ya
════════════════════════
ⴵ Time: Tue, 12 May 2026 19:47:59 GMT
════════════════════════
⌗ Tags: #threat_hunting #cybersecurity #tryhackme #writeup #blue_team
Medium
Hunt Me I: Payment Collectors-TryHackMe Writeup
This is a walkthrough for the Hunt Me I: Payment Collectors room, part of the Threat Hunting module and SOC Level 2 learning path. It’s…
35 views
Daily Writeups
⤷ Title: Canvas Hackers ShinyHunters Say Their Official Domain Was Suspended
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 12 May 2026 21:18:09 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Canvas #Cybersecurity #data breach #Domain #Instructure #LMS #Serbia #ShinyHunters
Hackread
Canvas Hackers ShinyHunters Say Their Official Domain Was Suspended
ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.
24 views
Daily Writeups
⤷ Title: HTB Editor — Walkthrough
════════════════════════
𐀪 Author: Bianca
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:18:33 GMT
════════════════════════
⌗ Tags: #xwiki #penetration_testing #hackthebox #hacking #htb
Medium
HTB Editor — Walkthrough
Target IP: 10.129.231.23
15 views
Daily Writeups
⤷ Title: Kernel Dynamic Offset Resolution using PDB Symbols
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 12 May 2026 21:08:21 GMT
════════════════════════
⌗ Tags: #hacking #malware #infosec #cybersecurity #pentesting
Medium
Kernel Dynamic Offset Resolution using PDB Symbols
Welcome to this new Medium post. Today, I’ll show you an interesting approach to resolving kernel offsets dynamically. In previous BYOVD…
10 views
Daily Writeups
⤷ Title: CVE Program Report for Quarter 1 Calendar Year (Q1 CY) 2026
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:56:07 GMT
════════════════════════
⌗ Tags: #vulnerability #infosec #information_technology #information_security #cybersecurity
Medium
CVE Program Report for Quarter 1 Calendar Year (Q1 CY) 2026
The CVE Program’s quarterly summary of program milestones and metrics for Q1 CY 2026.
8 views
Daily Writeups
⤷ Title: Understanding Kerberos Delegation and Unconstrained Delegation
════════════════════════
𐀪 Author: cyberpro151
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:36:10 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #red_team #authentication
Medium
Understanding Kerberos Delegation and Unconstrained Delegation
Introduction:
10 views
Daily Writeups
⤷ Title: TryHackMe | Monitoring AWS Logins | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:05:28 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #aws #tryhackme_writeup #cybersecurity #tryhackme
Medium
TryHackMe | Monitoring AWS Logins | WriteUp
Explore AWS authentication, common IAM threats, and SIEM detection options.
18 views
Daily Writeups
⤷ Title: TryHackMe | Web Server Attacks — I | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:03:41 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_writeup #tryhackme_walkthrough #cyber_security_awareness
Medium
TryHackMe | Web Server Attacks — I | WriteUp
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
24 views
Daily Writeups
⤷ Title: Portswigger Tüm XSS Zafiyetleri
════════════════════════
𐀪 Author: Huseyin KALKAN
════════════════════════
ⴵ Time: Tue, 12 May 2026 23:01:12 GMT
════════════════════════
⌗ Tags: #siber_guvenlik #türkçe #xs #web_güvenliği
Medium
Portswigger Tüm XSS Zafiyetleri
XSS zafiyeti nedir?
28 views
Daily Writeups
⤷ Title: NoSQL Injection Guide: Fundamentals, Types, Exploitation, and Mitigation
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 13 May 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #nosql #cybersecurity #hacking
Medium
NoSQL Injection Guide: Fundamentals, Types, Exploitation, and Mitigation
Learn the basics of NoSQL injection, attack vectors in MongoDB, and advanced exploitation and defense strategies.
27 views
Daily Writeups
⤷ Title: OSCP Dailies: THM — Roasted — Day 1
════════════════════════
𐀪 Author: MichaelLearns_
════════════════════════
ⴵ Time: Tue, 12 May 2026 23:36:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #smbclient #oscp #tryhackme #nmap
Medium
OSCP Dailies: THM — Roasted — Day 1
This is part of my daily labs in preparation for OSCP. I am documenting everything I am learning, tools that I am using and reflections as…
28 views
Daily Writeups
⤷ Title: Regulated, Audited, and Breached: Hardening a Legacy API Under a Financial Regulator’s Watch
════════════════════════
𐀪 Author: Ggontar
════════════════════════
ⴵ Time: Tue, 12 May 2026 22:55:15 GMT
════════════════════════
⌗ Tags: #type_safety #api #backend #sql_injection #appsec
Medium
Regulated, Audited, and Breached: Hardening a Legacy API Under a Financial Regulator’s Watch
As a financial services company, we were required by our regulator to conduct penetration testing. It wasn’t a nice-to-have or a proactive…
27 views
Daily Writeups
⤷ Title: Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:36:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BitLocker bypass #CTFMON #Elevation of Privilege #GreenPlasma #infosec #Microsoft #PoC #proof_of_concept #Windows Security #Windows zero_day #WinRE #YellowKey #zero_day
Daily CyberSecurity
Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
Urgent: Public PoC exploit code released for YellowKey (BitLocker bypass) and GreenPlasma (SYSTEM elevation). Windows 11 and Server 2025 are at high risk.
24 views
Daily Writeups
⤷ Title: Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25786 #industrial automation #infosec #Manufacturing Security #OT Security #Patch Alert #PLC Security #Siemens #SIMATIC S7 #TIA Portal #XSS
Daily CyberSecurity
Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
Critical Siemens Alert: 9.3 severity XSS flaws hit SIMATIC S7 PLCs. Attackers can hijack sessions via web interfaces. Update to V3.1.6 or follow mitigations.
14 views
Daily Writeups
⤷ Title: 9.8 Severity Alert: Malicious Git Branches Can Hijack Your WebdriverIO Build Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:30:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BrowserStack #CI/CD security #Command Injection #CVE_2026_25244 #DevOps #GitHub Security #infosec #rce #supply chain attack #Test Automation #WebdriverIO
Daily CyberSecurity
9.8 Severity Alert: Malicious Git Branches Can Hijack Your WebdriverIO Build Servers
Critical Alert: CVE-2026-25244 (CVSS 9.8) in WebdriverIO allows RCE via unsanitized git branch names. Secure your CI/CD pipeline and update to 9.24.0 now.
8 views
Daily Writeups
⤷ Title: Microsoft Patch Tuesday May 2026 Fixes 137 Flaws, Including Netlogon RCE and Critical SSO Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:18:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure AI Foundry #CVE_2026_41089 #Cyber Security #Hyper_V #infosec #M365 Copilot #Microsoft #Netlogon #Patch Tuesday #rce #SSO Bypass #Windows Security
Daily CyberSecurity
Microsoft Patch Tuesday May 2026 Fixes 137 Flaws, Including Netlogon RCE and Critical SSO Bypass
Microsoft’s May 2026 update fixes 137 vulnerabilities, including 30 Critical RCE and EoP flaws. Prioritize patches for Netlogon, Office, and M365 Copilot now.
12 views
Daily Writeups
⤷ Title: CVSS 10 Alert: SandboxJS Critical Escape Vulnerability Enables Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:02:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_43898 #infosec #JavaScript Security #rce #Remote Code Execution #Sandbox Escape #SandboxJS #Supply Chain Security #Vulnerability Alert #Web Security
Daily CyberSecurity
CVSS 10 Alert: SandboxJS Critical Escape Vulnerability Enables Host Takeover
Critical Alert: CVE-2026-43898 (CVSS 10) in SandboxJS allows a total sandbox escape and RCE. Update to version 0.9.6 immediately to secure your host.
8 views
Daily Writeups
⤷ Title: PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:00:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_44338 #Cyber Security #Exploit in the Wild #infosec #LLM Security #Multi_Agent Orchestration #PraisonAI #Sysdig TRT
Daily CyberSecurity
PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
Sysdig warns: PraisonAI (CVE-2026-44338) exploited in under 4 hours. Attackers bypassed auth to hijack agents and drain API quotas. Update to 4.6.34 now!
7 views
Daily Writeups
⤷ Title: 9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:43:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BDAT #CVE_2026_45185 #Exim #GnuTLS #heap corruption #infosec #Mail Server Security #Patch Now #rce #SMTP CHUNKING #Vulnerability Alert #XBOW
Daily CyberSecurity
9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
Urgent: Exim fixes a 9.8 severity RCE (CVE-2026-45185) affecting GnuTLS builds. A single-byte heap corruption allows for server takeover. Update to 4.99.3 now!
12 views