Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Windows Privilege Escalation, The Modern Comprehensive Guide (Part I)
════════════════════════
𐀪 Author: opr3vail
════════════════════════
ⴵ Time: Wed, 13 May 2026 18:24:54 GMT
════════════════════════
⌗ Tags: #privilege_escalation #hacking #red_team #windows #penetration_testing
Medium
Windows Privilege Escalation, Modern Comprehensive Guide (Part I)
Windows is the most prominent and most targeted Desktop Operating System on the planet.
16 views
Daily Writeups
⤷ Title: Support — HackTheBox Detailed Writeup
════════════════════════
𐀪 Author: Beri Contraster
════════════════════════
ⴵ Time: Wed, 13 May 2026 18:06:40 GMT
════════════════════════
⌗ Tags: #active_directory #hacking #hackthebox #ctf_writeup #network_analysis
Medium
Support — HackTheBox Detailed Writeup
Today, we are solving Support from HackTheBox. The difficulty is easy for this Windows machine. It’s created by 0xdf.
12 views
Daily Writeups
⤷ Title: Windows Privilege Escalation, Modern Comprehensive Guide (Part I)
════════════════════════
𐀪 Author: opr3vail
════════════════════════
ⴵ Time: Wed, 13 May 2026 18:24:54 GMT
════════════════════════
⌗ Tags: #privilege_escalation #hacking #red_team #windows #penetration_testing
Medium
Windows Privilege Escalation, Modern Comprehensive Guide (Part I)
Windows is the most prominent and most targeted Desktop Operating System on the planet.
14 views
Daily Writeups
⤷ Title: Investigating a Compromised ML Model: A Hands-On AI Supply Chain Incident
════════════════════════
𐀪 Author: Stoic_Gang
════════════════════════
ⴵ Time: Wed, 13 May 2026 17:03:26 GMT
════════════════════════
⌗ Tags: #tryhackme #ai_supply_chain_security #machine_learning #cybersecurity #ai
Medium
Investigating a Compromised ML Model: A Hands-On AI Supply Chain Incident
A walkthrough of TryHackMe’s Payload room, built on concepts from Securing the AI Supply Chain.
19 views
Daily Writeups
⤷ Title: The Slop Line
════════════════════════
𐀪 Author: Suman Reddy
════════════════════════
ⴵ Time: Wed, 13 May 2026 17:46:15 GMT
════════════════════════
⌗ Tags: #gpt #content #ai_slop #xs
Medium
The Slop Line
What a viral Gen Z GPT taught me about AI content, emotional resonance, and the difference between sounding right and actually landing.
26 views
Daily Writeups
⤷ Title: How We Built SecureBank; A Banking App That Hacks Itself
════════════════════════
𐀪 Author: Zaid Haris
════════════════════════
ⴵ Time: Wed, 13 May 2026 17:25:50 GMT
════════════════════════
⌗ Tags: #xs #csrf #web_development #secure_banking #information_security
Medium
How We Built SecureBank; A Banking App That Hacks Itself
A step-by-step walkthrough of building a full-stack banking app with live attack simulations, AI fraud detection, and real security…
36 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
31 views
Daily Writeups
⤷ Title: Access to members-only YouTube video content
════════════════════════
𐀪 Author: Seqrity
════════════════════════
ⴵ Time: Wed, 13 May 2026 19:57:46 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #security #bug_bounty #ai_security
Medium
Access to members-only YouTube video content
I was browsing the NahamSec YouTube channel when I noticed some members-only videos. Usually, you need to be a paid member of a channel to…
23 views
Daily Writeups
⤷ Title: ZenPhoto | Proving Grounds | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Wed, 13 May 2026 19:30:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #networking #hacking #tech
Medium
ZenPhoto | Proving Grounds | OSCP Preparation
I use the same nmap command to start every box; it is a three-stage “speed-to-depth” scan that first uses high-performance flags like…
23 views
Daily Writeups
⤷ Title: Zafiyeti Bulduk, Sıra İstismarında.
════════════════════════
𐀪 Author: Este Eren
════════════════════════
ⴵ Time: Wed, 13 May 2026 19:40:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #sql_injection #ethical_hacking #web_security
Medium
Zafiyeti Bulduk, Sıra İstismarında.
Öğrenerek Yazıyorum #3
27 views
Daily Writeups
⤷ Title: Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 13 May 2026 21:10:04 +0000
════════════════════════
⌗ Tags: #Data Breaches #Cyber Crime #Security #Canvas #Cyber Attack #Cybersecurity #Data leak #Instructure #Ransom #ShinyHunters
Hackread
Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
28 views
Daily Writeups
⤷ Title: I Pentested a Real CRM System and Found 4 Critical Vulnerabilities — Here’s the Full Attack Chain
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Wed, 13 May 2026 22:02:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #writeup #bug_bounty #web_penetration_testing #cybersecurity
Medium
I Pentested a Real CRM System and Found 4 Critical Vulnerabilities — Here’s the Full Attack Chain
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads
20 views
Daily Writeups
⤷ Title: 1,000,000 WordPress Sites Affected by Arbitrary File Read and SQL Injection Vulnerabilities in…
════════════════════════
𐀪 Author: Wordfence
════════════════════════
ⴵ Time: Wed, 13 May 2026 21:37:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #wordpress
Medium
1,000,000 WordPress Sites Affected by Arbitrary File Read and SQL Injection Vulnerabilities in…
On March 21, 2026, the Wordfence Intelligence Vulnerability Database received submissions for two vulnerabilities in Avada Builder, a…
9 views
Daily Writeups
⤷ Title: Bug Bounty: The Reward Hunters of the Digital World
════════════════════════
𐀪 Author: Ziya Gokalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 21:32:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #cyberattack #bounty_hunter #bug_bounty
Medium
Bug Bounty: The Reward Hunters of the Digital World
Introduction
13 views
Daily Writeups
⤷ Title: A $250,000 Chrome Sandbox Escape: Breaking Out of the Browser from the Inside
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Wed, 13 May 2026 22:54:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #ethical_hacking #technology
Medium
A $250,000 Chrome Sandbox Escape: Breaking Out of the Browser from the Inside
Reference and source credit: https://issues.chromium.org/issues/412578726
24 views
Daily Writeups
⤷ Title: OverTheWire Bandit Walkthrough — Level 2 → 3 | 30-Day Cybersecurity Learning Journey (Day 3)
════════════════════════
𐀪 Author: William | Cybersecurity & SOC Analyst
════════════════════════
ⴵ Time: Wed, 13 May 2026 21:32:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #ctf #security #infosec
Medium
OverTheWire Bandit Walkthrough — Level 2 → 3 | 30-Day Cybersecurity Learning Journey (Day 3)
Reading a file with spaces in its name and why handling filenames correctly is a daily reality in Linux security work.
22 views
Daily Writeups
⤷ Title: Mitmproxy as Alternative to Burp Suite Macros
════════════════════════
𐀪 Author: Revan A
════════════════════════
ⴵ Time: Wed, 13 May 2026 23:00:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #red_team #pentesting #cybersecurity
Medium
Mitmproxy as Alternative to Burp Suite Macros
Beberapa aplikasi atau website udah terapin “signature”. Dan biasanya pentester kesulitan, jadi gw mau kasih alternatif, yaitu mitmproxy
20 views
Daily Writeups
⤷ Title: VulnHub — Shenron: 1 | Full Walkthrough
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Wed, 13 May 2026 21:37:45 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #ctf_writeup #vulnhub #cybersecurity #penetration_testing
Medium
VulnHub — Shenron: 1 | Full Walkthrough
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads Platform: VulnHub Machine: Shenron: 1 by…
22 views
Daily Writeups
⤷ Title: TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 14 May 2026 00:37:05 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #AI #Cyber Attack #Cyber Crime #Cybersecurity #Mistral AI #NPM #PyPI #Supply Chain #TeamPCP
Hackread
TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack
TeamPCP claims to be selling alleged Mistral AI repositories on a hacker forum after the Mini Shai-Hulud attack targeted npm and PyPI ecosystems.
23 views
Daily Writeups
⤷ Title: OPNsense Critical Root RCE (CVE-2026-44194 & CVE-2026-45158) Details and PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 00:54:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44194 #CVE_2026_45158 #Cyber Security #DHCP Security #firewall security #infosec #OPNsense #Patch Alert #PoC #proof_of_concept #rce #root access
Daily CyberSecurity
OPNsense Critical Root RCE (CVE-2026-44194 & CVE-2026-45158) Details and PoC Disclosed
Urgent: Public PoC for OPNsense CVE-2026-44194 and CVE-2026-45158. Critical flaws allow root command execution via DHCP and User sync. Update to 26.1.8 now!
13 views
Daily Writeups
⤷ Title: Urgent Update: Composer Vulnerability Leaks GitHub Secrets in Plaintext Logs (CVE-2026-45793)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 00:34:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #Composer #Credential Theft #CVE_2026_45793 #DevSecOps #GitHub Actions #GitHub Token #Information Disclosure #Nils Adermann #php
Daily CyberSecurity
Urgent Update: Composer Vulnerability Leaks GitHub Secrets in Plaintext Logs (CVE-2026-45793)
Composer CVE-2026-45793 leaks GitHub tokens into CI/CD logs due to a validation error. Update to version 2.9.8 now and audit your GitHub Action logs.
13 views