Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel K #Authorization Bypass #Build Deputy Attack #Cloud Native Security #CVE_2026_45760 #Cyber Security #infosec #Kubernetes Namespace Bypass #Multi_Tenancy Defect #Patch Alert #Pod Generation Hijack
Daily CyberSecurity
New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
Apache Camel K fixes CVE-2026-45760, a critical cross-namespace "Build Deputy" flaw allowing authorized users to hijack pods in secure namespaces.
25 views
Daily Writeups
⤷ Title: Your VPN Might Not Be Protecting You on Android 16
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #android
Medium
Your VPN Might Not Be Protecting You on Android 16
Millions of users trust VPNs to hide their identity online. But what if Android itself is quietly bypassing the VPN tunnel?
17 views
Daily Writeups
⤷ Title: Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
════════════════════════
𐀪 Author: 0xGosu
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:00:52 GMT
════════════════════════
⌗ Tags: #linux #ai #software_engineering #gadgets #hacking
Medium
Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
Flipper One is easy to misunderstand if you approach it as “the next Flipper Zero.”
15 views
Daily Writeups
⤷ Title: One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:52:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #cyber_threat_intelligence #cybersecurity #information_security #artificial_intelligence
Medium
One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
From Scattered Research to a Structured Cybersecurity Knowledge Base
15 views
Daily Writeups
⤷ Title: Nmap in TryHackMe
════════════════════════
𐀪 Author: Gajera Prins
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:18:16 GMT
════════════════════════
⌗ Tags: #namp #tryhackme #tryhackme_walkthrough
Medium
Nmap in TryHackMe
Access The Lab https://tryhackme.com/room/furthernmap
21 views
Daily Writeups
⤷ Title: HackThisSite: Basic Challenges Solutions (Unofficial)
════════════════════════
𐀪 Author: Subhrajit Sain
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:14:36 GMT
════════════════════════
⌗ Tags: #hack_this_site #walkthrough #ctf #ctf_walkthrough #ethical_hacking
Medium
HackThisSite: Basic Challenges Solutions (Unofficial)
Solutions to the basic challenges on HackThisSite.org. Please note that this is not an official HTS post.
25 views
Daily Writeups
⤷ Title: CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 11:17:33 +0530
════════════════════════
⌗ Tags: No_Tags
18 views
Daily Writeups
⤷ Title: Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 11:06:18 +0530
════════════════════════
⌗ Tags: No_Tags
17 views
Daily Writeups
⤷ Title: ️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:19:54 GMT
════════════════════════
⌗ Tags: #cryptocurrency #cybercrime #hacking #cybersecurity #true_crime
Medium
🕵️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
15 views
Daily Writeups
⤷ Title: Adversarial Mind — Crackmes Writeup
════════════════════════
𐀪 Author: CHANDRA KANT BAURI
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:24:18 GMT
════════════════════════
⌗ Tags: #infosec #reverse_engineering #cybersecurity #ctf_writeup #crackme
Medium
Adversarial Mind — Crackmes Writeup
When overthinking is your worst enemy in reverse engineering.
16 views
Daily Writeups
⤷ Title: TryHackMe CTF: W1seGuy Writeup Python approach
════════════════════════
𐀪 Author: Arsha Ranjith
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:34:36 GMT
════════════════════════
⌗ Tags: #w1seguy #tryhackme #cybersecurity #tryhackme_walkthrough #cryptography
Medium
TryHackMe CTF: W1seGuy Writeup Python approach
TryHackMe: W1seGuy Writeup Hello, fellow reader! I recently completed the W1seGuy challenge on TryHackMe, and I have to say it’s very beginner-friendly, although having some basic programming …
16 views
Daily Writeups
⤷ Title: The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
════════════════════════
𐀪 Author: Pankaj Kumar Yadav
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:29:32 GMT
════════════════════════
⌗ Tags: #social_media #business #ethical_hacking #cybersecurity #society
Medium
The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
Every day, thousands of web applications leak their most sensitive secrets through a single file. What starts as a simple fuzzing request…
13 views
Daily Writeups
⤷ Title: TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
════════════════════════
𐀪 Author: Fsociety
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:14:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #tryhackme_walkthrough #ethical_hacking
Medium
TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
Recently, I completed the Ignite room on TryHackMe. This room is beginner-friendly but provides excellent hands-on exposure to real-world…
20 views
Daily Writeups
⤷ Title: Inside the Influence Network of Iran’s Diplomatic Missions on X
════════════════════════
𐀪 Author: Sourena
════════════════════════
ⴵ Time: Fri, 22 May 2026 05:04:49 GMT
════════════════════════
⌗ Tags: #twitter #xs #iran #info_ops #embassy
Medium
Inside the Influence Network of Iran’s Diplomatic Missions on X
A Data-Driven Look at How Iran’s Embassies Weaponized Social Media to Drive Wartime Propaganda and Amplify State Narratives
25 views
Daily Writeups
⤷ Title: Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:03:04 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
Daily CyberSecurity
Bypassing Terminal Protections: New SHub "Reaper" Variant Abuses AppleScript to Loot macOS Endpoints
SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.
20 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
13 views
Daily Writeups
⤷ Title: Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:17:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET RAT #APJ Cyber Espionage #CDN Masquerading #Chinese APT #Cyber Security #Darktrace #DLL Sideloading #infosec #living_off_the_land #malware #Memory injection #Twill Typhoon
Daily CyberSecurity
Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
Darktrace exposes Chinese APT Twill Typhoon’s latest campaign using DLL sideloading and Yahoo/Apple CDN lookalikes to deploy a modular .NET RAT.
15 views
Daily Writeups
⤷ Title: Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:30:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Command Injection #CVE_2026_34908 #CVE_2026_34909 #CVE_2026_34910 #Cyber Security #firmware update #infosec #Network Video Recorder #Path Traversal #Ubiquiti #Ubiquiti UniFi OS #UniFi OS #Vulnerability
Daily CyberSecurity
Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
Ubiquiti patches three critical CVSS 10.0 vulnerabilities in UniFi OS affecting gateways, storage, and NVRs. Update your firmware immediately!
22 views
Daily Writeups
⤷ Title: I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
════════════════════════
𐀪 Author: Sidharthsmenon
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:45:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity_news #ethical_hacking #cybersecurity
Medium
I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
A deep technical walkthrough of how I designed, built, and deployed an automated bug bounty recon dashboard using Node.js, React, and 12…
❤1
20 views
Daily Writeups
⤷ Title: Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #medium #tech
Medium
Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
Hi, I’m Vipul 👋 — the human behind TheHackersLog
15 views