Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: TryHackMe: 0Day — CTF Write-Up
════════════════════════
𐀪 Author: Burak
════════════════════════
ⴵ Time: Mon, 18 May 2026 19:57:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #pentester #0day
Medium
TryHackMe: 0Day — CTF Write-Up
TryHackMe: 0Day — CTF Write-Up
24 views
Daily Writeups
⤷ Title: File Inclusion - Challenge Part | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Efe D
════════════════════════
ⴵ Time: Mon, 18 May 2026 14:37:14 GMT
════════════════════════
⌗ Tags: #file_inclusion #remote_file_inclusion #tryhackme #tryhackme_walkthrough
Medium
File Inclusion - Tryhackme | Challenge Part
This writeup contains the solution for Tryhackme — File Inclusion challenges section.
40 views
Daily Writeups
⤷ Title: Day 30 — Building Your Linux Hacking Workflow (Final Day)
════════════════════════
𐀪 Author: Cybersecplayground
════════════════════════
ⴵ Time: Mon, 18 May 2026 22:45:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #linux #penetration_testing #linux_tutorial
Medium
Day 30 — Building Your Linux Hacking Workflow (Final Day)
Welcome to the final day of the 30-Day Linux for Hackers course.
28 views
Daily Writeups
⤷ Title: Account Takeover via OTP Bypass Through Response Manipulation — A Real-World Bug Finding
════════════════════════
𐀪 Author: Md Tanjimul Islam Sifat
════════════════════════
ⴵ Time: Mon, 18 May 2026 22:06:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_hunting #ethical_hacking #ato
Medium
Account Takeover via OTP Bypass Through Response Manipulation — A Real-World Bug Finding
TL;DR: I discovered a critical vulnerability on tpl.com.bd that allows any unauthenticated attacker to fully take over any user account —…
23 views
Daily Writeups
⤷ Title: 200,000 WordPress Sites at Risk from Critical Authentication Bypass Vulnerability in Burst…
════════════════════════
𐀪 Author: Wordfence
════════════════════════
ⴵ Time: Mon, 18 May 2026 21:01:09 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #bug_bounty
Medium
200,000 WordPress Sites at Risk from Critical Authentication Bypass Vulnerability in Burst…
On May 8, 2026, PRISM, Wordfence Threat Intelligence’s autonomous vulnerability research platform, discovered a critical Authentication…
9 views
Daily Writeups
⤷ Title: Pwning “DJANGO” on PwnTillDawn: From Anonymous FTP to Full System Compromise
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Mon, 18 May 2026 22:02:51 GMT
════════════════════════
⌗ Tags: #ctf_writeup #cybernerddd #cybersecurity #hacking #django
Medium
Pwning “DJANGO” on PwnTillDawn: From Anonymous FTP to Full System Compromise
Recently, I compromised a Windows machine named “DJANGO” on the PwnTillDawn battlefield.
14 views
Daily Writeups
⤷ Title: AI Hacking for Beginners: A Five-Article Series
════════════════════════
𐀪 Author: Moez Ben-Azzouz
════════════════════════
ⴵ Time: Mon, 18 May 2026 21:04:28 GMT
════════════════════════
⌗ Tags: #hacking #ai #pentesting #artificial_intelligence #cybersecurity
Medium
AI Hacking for Beginners: A Five-Article Series
Article 5: The New Front Line — Real AI Incidents, CVEs, and What They Teach Us
13 views
Daily Writeups
⤷ Title: Back to the Labs ~ Quick Update Before the Real Content Drops
════════════════════════
𐀪 Author: b4dk4rm4sec
════════════════════════
ⴵ Time: Mon, 18 May 2026 22:07:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #pentest #technology
Medium
Back to the Labs ~ Quick Update Before the Real Content Drops
Where I’ve been, where I’m going, and a small correction.
17 views
Daily Writeups
⤷ Title: The Regex Said Safe. The Parser Disagreed, NASA Earth Science Platform had a Critical Vulnerability
════════════════════════
𐀪 Author: Dewank Pant
════════════════════════
ⴵ Time: Mon, 18 May 2026 21:30:18 GMT
════════════════════════
⌗ Tags: #information_security #security #ssrf #nasa #xxe
Medium
The Regex Said Safe. The Parser Disagreed, NASA Earth Science Platform had a Critical Vulnerability
A sanitizer understood text. A parser understood XML grammar. The gap became a CVSS 9.1 bug in NASA Earth science infrastructure.
24 views
Daily Writeups
⤷ Title: Guía de Race Conditions: Tipos, Explotación y Mitigación en APIs
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 19 May 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #race_condition #bug_bounty #hacking #technology #cybersecurity
Medium
Guía de Race Conditions: Tipos, Explotación y Mitigación en APIs
Aprende qué es una Race Condition, sus metodologías de explotación y cómo mitigarlas.
25 views
Daily Writeups
⤷ Title: PortSwigger Lab #1 — Username Enumeration via Different Responses
════════════════════════
𐀪 Author: b4dk4rm4sec
════════════════════════
ⴵ Time: Mon, 18 May 2026 23:32:24 GMT
════════════════════════
⌗ Tags: #penetration_testing #software_development #cybersecurity #technology
Medium
PortSwigger Lab #1 — Username Enumeration via Different Responses
First real walkthrough. Burp Intruder, two wordlists, and one telltale response length.
19 views
Daily Writeups
⤷ Title: HTML Should Have Embedded Markdown 30 Years Ago
════════════════════════
𐀪 Author: Outermostkt
════════════════════════
ⴵ Time: Sun, 17 May 2026 02:08:54 GMT
════════════════════════
⌗ Tags: #thariq #ai #xs #html #markdown
Medium
HTML Should Have Embedded Markdown 30 Years Ago
As you may know, there’s been a lot of buzz in the AI community lately about shifting back from Markdown to HTML. For instance, in articles…
19 views
Daily Writeups
⤷ Title: UNDERSTANDING BASIC SQL
════════════════════════
𐀪 Author: meimisaki
════════════════════════
ⴵ Time: Tue, 19 May 2026 00:57:03 GMT
════════════════════════
⌗ Tags: #sql_injection #css
Medium
UNDERSTANDING BASIC SQL
may 18, This is a small little writeup on sql injections queries and understanding how they process. From John Hammonds HackingHub as this…
24 views
Daily Writeups
⤷ Title: Reclaiming the Narrative: How “Hire a Hacker Pro” Built an Immutable Blueprint for Enterprise…
════════════════════════
𐀪 Author: Richard Shaughnessy
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:38:59 GMT
════════════════════════
⌗ Tags: #news #cybersecurity #hacking #red_team #ethical_hacking
Medium
Reclaiming the Narrative: How “Hire a Hacker Pro” Built an Immutable Blueprint for Enterprise Security Transparency
The modern digital landscape is defined by an irony of visibility. On the one hand, cybersecurity has become a boardroom priority, a…
21 views
Daily Writeups
⤷ Title: Servidor de jogos — TryHackMe
════════════════════════
𐀪 Author: 0xReconDev
════════════════════════
ⴵ Time: Mon, 18 May 2026 16:03:19 GMT
════════════════════════
⌗ Tags: #pentesting #ctf #ctf_writeup #hacking #tryhackme_writeup
Medium
GamingServer — TryHackMe
Nesse pequeno documento, vou contar como foi minha trajetória e pensamento usado para terminar o CTF GamingServer no TryHackMe. Eu não sou…
30 views
Daily Writeups
⤷ Title: Digital Marketing Course: Your Gateway to a Thriving Career in 2026
════════════════════════
𐀪 Author: KOMAL PAL
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:24:08 GMT
════════════════════════
⌗ Tags: #ethical_hacking #digital_marketing #cybersecurity #javascript #python
Medium
Digital Marketing Course: Your Gateway to a Thriving Career in 2026
In today’s fast-paced digital world, mastering digital marketing course essentials has become non-negotiable for professionals and freshers…
27 views
Daily Writeups
⤷ Title: TeamPCP Open-Sources “Shai-Hulud” AI Supply Chain Malware, Hitting NPM Fleet
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:59:09 +0000
════════════════════════
⌗ Tags: #Malware #@axios_util #@chalk_tempalte #Credential Harvesting #DevSecOps 2026 #Indicator of Compromise #Malware Proliferation #npm Supply Chain Attack #Shai_Hulud Worm #TeamPCP #Typosquatting
Daily CyberSecurity
TeamPCP Open-Sources "Shai-Hulud" AI Supply Chain Malware, Hitting NPM Fleet
TeamPCP has open-sourced the Shai-Hulud supply chain worm. Multiple malicious typosquatted NPM packages are already weaponizing the AI-synthesized code.
20 views
Daily Writeups
⤷ Title: NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:51:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Mitigation #CVE_2026_42945 #Denial of Service #F5 Networks #Heap Buffer Overflow #Honeypot Telemetry #NGINX Rift #ngx_http_rewrite_module #Remote Code Execution #VulnCheck
Daily CyberSecurity
NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
Critical 18-year-old "NGINX Rift" flaw CVE-2026-42945 is under active exploitation. Learn how to patch your proxies and block the unauthenticated heap overflow.
13 views
Daily Writeups
⤷ Title: Microsoft Announces Driver Quality Initiative to Fix Windows 11 Sleep Battery Drain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:43:06 +0000
════════════════════════
⌗ Tags: #Technology #Windows #Battery Drain Fix #C_State Sleep #Cloud_Initiated Driver Recovery #Driver Quality Initiative #Laptop Overheating #OEM Firmware #Telemetry Loophole #Windows 11 Modern Standby #Windows Hardware Compatibility #WinHEC 2026
Daily CyberSecurity
Microsoft Announces Driver Quality Initiative to Fix Windows 11 Sleep Battery Drain
At WinHEC 2026, Microsoft launched the Driver Quality Initiative to penalize poorly optimized OEM hardware drivers that cause laptop overheating and sleep battery drain.
10 views
Daily Writeups
⤷ Title: By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:39:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App_Bound Encryption #Chromium Architecture #Cleartext Credentials #Edge v148.0 Stable #Local Privilege Escalation #Memory Dump #microsoft edge #Process Memory Scraping #Threat Intelligence 2026 #Tom Jøran Sønstebyseter Rønning
Daily CyberSecurity
By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
Microsoft pivots on its "by design" stance, updating Edge to version 148.0 to stop caching your entire plaintext password vault in active volatile memory.
11 views
Daily Writeups
⤷ Title: Canonical Unlocks Ubuntu 26.04 LTS Upgrade Path for Ubuntu 25.10 Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:34:44 +0000
════════════════════════
⌗ Tags: #Linux #Canonical Lifecycle #Linux Desktop Security #Long Term Support Migration #Point Release Timeline #Resolute Raccoon #Software Regressions #Software Updater #System Upgrades 2026 #Ubuntu 25.10 Upgrade #Ubuntu 26.04 LTS
Daily CyberSecurity
Canonical Unlocks Ubuntu 26.04 LTS Upgrade Path for Ubuntu 25.10 Users
Canonical has officially opened the GUI upgrade gate from Ubuntu 25.10 to Ubuntu 26.04 LTS. Learn why the path was delayed and what it means for 24.04 users.
10 views