Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Can You Be Hacked in Just 5 Minutes? - NareshIT
════════════════════════
𐀪 Author: Naresh I Technologies
════════════════════════
ⴵ Time: Mon, 18 May 2026 12:03:12 GMT
════════════════════════
⌗ Tags: #cyberattack #ethical_hacking #naresh_it #cybersecurity #hacked
Medium
Can You Be Hacked in Just 5 Minutes? - NareshIT
In today’s digital world, cyberattacks are no longer limited to large companies or government systems. Ordinary people, students…
46 views
Daily Writeups
⤷ Title: How to Reduce Phishing Exposure Before It Turns into Business Disruption
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 18 May 2026 18:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: 10 Tips for Phrasing Employee Feedback in Reviews
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:37:18 +0000
════════════════════════
⌗ Tags: #Technology #Business
Hackread
10 Tips for Phrasing Employee Feedback in Reviews
Performance reviews inside cybersecurity teams carry unusually high stakes. Security analysts, incident responders, IT administrators, and compliance staff
38 views
Daily Writeups
⤷ Title: Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 18 May 2026 13:42:46 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #CloudFlare #Cyber Attack #Cyber Espionage #Cybersecurity #Malaysia #Malware #Oasis Security #Phishing #Privacy #Spying
Hackread
Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign
Government Backed Hackers abused Cloudflare storage services in a Malaysian espionage campaign involving hidden C2 systems and data exfiltration.
16 views
Daily Writeups
⤷ Title: New “TencShell” Malware Weaponizes Open-Source Rshell via Third-Party Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 12:28:23 +0000
════════════════════════
⌗ Tags: #Malware #C2 Framework #Cato CTRL #Cyber Security #Donut Shellcode #infosec #Malware Analysis #Rshell #supply chain attack #TencShell #third_party risk #threat intelligence
Daily CyberSecurity
New "TencShell" Malware Weaponizes Open-Source Rshell via Third-Party Access
Cato CTRL intercepts "TencShell," a new stealth malware derived from open-source Rshell. Attackers use third-party access to breach networks!
14 views
Daily Writeups
⤷ Title: How I hacked the reports database of a Mid‑Cap Industrial Stock while my flatmate grinded Valo
════════════════════════
𐀪 Author: Issan
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:46:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #javascript #web_security #offensive_security #bug_bounty
Medium
How I hacked the reports database of a Mid‑Cap Industrial Stock while my flatmate grinded Valo😉
Just a 3 AM rabbit hole, a locked admin page, and a secret that should’ve never left at the server.
16 views
Daily Writeups
⤷ Title: ReconX Automation | Save Hours on Bug Bounty Recon
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 18 May 2026 13:41:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #automation #cybersecurity #web_development
Medium
ReconX Automation | Save Hours on Bug Bounty Recon
Bug bounty hunters spend countless hours repeating the same reconnaissance steps every single day — subdomain enumeration, alive host…
236 views
Daily Writeups
⤷ Title: What Happened to FireEye, the Company That Saw the Future and Lost the Market
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:34:09 GMT
════════════════════════
⌗ Tags: #business #cybersecurity #failure #innovation #hacking
Medium
What Happened to FireEye, the Company That Saw the Future and Lost the Market
“” is published by David SEHYEON Baek.
12 views
Daily Writeups
⤷ Title: Tomcat Takeover Lab — Cyberdefenders
════════════════════════
𐀪 Author: Yrddry
════════════════════════
ⴵ Time: Mon, 18 May 2026 13:12:49 GMT
════════════════════════
⌗ Tags: #blue_team #ctf_writeup #cybersecurity #cyberdefender #hacking
Medium
Tomcat Takeover Lab — Cyberdefenders
Write-Up for Tomcat Takeover Lab from Cyberdefenders. Just using wireshark and terminal
15 views
Daily Writeups
⤷ Title: Cloud Security Basics: Protecting Your Data in the Cloud ☁️
════════════════════════
𐀪 Author: Manula Udyoga
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:31:06 GMT
════════════════════════
⌗ Tags: #cloud_computing #infosec #data_protection #usa #cloud_security
Medium
Cloud Security Basics: Protecting Your Data in the Cloud ☁️🔒
The cloud has transformed how we store, access, and manage data. But with great convenience comes the need for robust cloud security…
14 views
Daily Writeups
⤷ Title: CISSP Chapter 2 — Part 4: Awareness Is Not a Slide Deck. It Is a Security Culture in Motion.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:01:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #leadership #infosec #cissp
Medium
CISSP Chapter 2 — Part 4: Awareness Is Not a Slide Deck. It Is a Security Culture in Motion.
Awareness, training, education, behavior change, role-based learning, and the program design choices that determine whether security…
18 views
Daily Writeups
⤷ Title: One Header Away From Disaster: Exploiting CORS Misconfigurations in the Wild
════════════════════════
𐀪 Author: 0xAbhiSec
════════════════════════
ⴵ Time: Mon, 18 May 2026 13:50:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #infosec #technology #ethical_hacking
Medium
One Header Away From Disaster: Exploiting CORS Misconfigurations in the Wild
How a Misconfigured HTTP Header Can Hand Attackers the Keys to Your API — and How to Stop It
29 views
Daily Writeups
⤷ Title: File Inclusion - Tryhackme | Challenge Part
════════════════════════
𐀪 Author: Efe D
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:37:14 GMT
════════════════════════
⌗ Tags: #file_inclusion #remote_file_inclusion #tryhackme #tryhackme_walkthrough
Medium
File Inclusion - Tryhackme | Challenge Part
This writeup contains the solution for Tryhackme — File Inclusion challenges section.
32 views
Daily Writeups
⤷ Title: From Enumeration to Root: Corrosion2 CTF Walkthrough (Web Exploitation & Privilege Escalation)
════════════════════════
𐀪 Author: Nwoke Evan Elochukwu Eguzozie
════════════════════════
ⴵ Time: Mon, 18 May 2026 13:59:49 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #cybersecurity #vulnhub #junior_pentester #vulnhub_writeup
Medium
From Enumeration to Root: Corrosion2 CTF Walkthrough (Web Exploitation & Privilege Escalation)
A full penetration testing walkthrough covering enumeration, exploitation, lateral movement, and privilege escalation in the Corrosion2…
51 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 18 May 2026 19:20:17 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: SQL Injection in Numeric Parameter(int) without common special characters
════════════════════════
𐀪 Author: Ahmed Abdelbaset
════════════════════════
ⴵ Time: Mon, 18 May 2026 16:52:24 GMT
════════════════════════
⌗ Tags: #infosec #software_development #bug_bounty #bug_bounty_writeup #bug_bounty_tips
Medium
SQL Injection in Numeric Parameter(int) without common special characters
Hello everyone, today I’ll talk about a real bug that me and my friend Or4nge16 discovered in a public Bug Bounty program on the Bugcrowd…
37 views
Daily Writeups
⤷ Title: When APIs Don’t Play by the Rules — Multiple Authorization Bypasses in a SaaS Platform
════════════════════════
𐀪 Author: Sagar Kirola
════════════════════════
ⴵ Time: Mon, 18 May 2026 16:32:54 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty_tips #security #news #bug_bounty
Medium
When APIs Don’t Play by the Rules — Multiple Authorization Bypasses in a SaaS Platform
Hello hunters,
24 views
Daily Writeups
⤷ Title: How I Could Delete Any Account via a Critical IDOR/BOLA Flaw and get $$$
════════════════════════
𐀪 Author: knox99
════════════════════════
ⴵ Time: Mon, 18 May 2026 15:06:49 GMT
════════════════════════
⌗ Tags: #money #security #hacking #bug_bounty #cybersecurity
Medium
How I Could Delete Any Account via a Critical IDOR/BOLA Flaw and get $$$
Hi everyone! My code name is knox99, and my name is saad talji. I am a cybersecurity researcher and a total computer geek. Today, let’s…
30 views
Daily Writeups
⤷ Title: SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
Introduction
22 views
Daily Writeups
⤷ Title: 1 Million WordPress Sites at Risk: Critical Avada Builder Vulnerabilities Expose Websites to Data…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Mon, 18 May 2026 15:46:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #web_security #application_security #wordpress
Medium
1 Million WordPress Sites at Risk: Critical Avada Builder Vulnerabilities Expose Websites to Data…
A newly disclosed set of vulnerabilities in the Avada Builder plugin has placed more than one million WordPress websites at potential risk.
19 views
Daily Writeups
⤷ Title: GamingServer — TryHackMe
════════════════════════
𐀪 Author: 0xReconDev
════════════════════════
ⴵ Time: Mon, 18 May 2026 16:03:19 GMT
════════════════════════
⌗ Tags: #pentesting #ctf #ctf_writeup #hacking #tryhackme_writeup
Medium
GamingServer — TryHackMe
Nesse pequeno documento, vou contar como foi minha trajetória e pensamento usado para terminar o CTF GamingServer no TryHackMe. Eu não sou…
15 views