Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Understanding Nmap at Packet Level — What I Actually Saw in Wireshark
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 22 May 2026 22:30:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #networking #ethical_hacking #nmap #cybersecurity
Medium
Understanding Nmap at Packet Level — What I Actually Saw in Wireshark
I ran Nmap scans and captured everything in Wireshark simultaneously. Here’s exactly what I discovered at byte level — not theory, real…
18 views
Daily Writeups
⤷ Title: Recruit TryHackMe walkthrough
════════════════════════
𐀪 Author: Crystalcascade14
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:10:59 GMT
════════════════════════
⌗ Tags: #lfi #cybersecurity #tryhackme_walkthrough #tryhackme #sql
Medium
Recruit TryHackMe walkthrough
Medium-level challenge that required knowledge of SQL Injection, Basic LFI (Local File Inclusion), Web enumeration (gobuster)…
22 views
Daily Writeups
⤷ Title: The Backend Engineer’s Guide to Broken Object Level Authorization
════════════════════════
𐀪 Author: Hafiq Iqmal
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:01:00 GMT
════════════════════════
⌗ Tags: #api_security #fastapi #laravel #backend #security
Medium
The Backend Engineer’s Guide to Broken Object Level Authorization
BOLA is OWASP’s number one API risk. Your authentication middleware does not stop it. Here is the code pattern that does.
26 views
Daily Writeups
⤷ Title: Is SQLI still exist in the wild ? 2 SQLI 0 $
════════════════════════
𐀪 Author: Ahmedsameh
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:41:27 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty #blind_sql_injection #sql_injection #information_security
Medium
Is SQLI still exist in the wild ? 2 SQLI 0 $
Two real SQLi vulnerabilities found during bug hunting — both out of scope, both reported anyway
21 views
Daily Writeups
⤷ Title: 3 Brain-Dead Bugs Making Me Thousands in 2026
════════════════════════
𐀪 Author: AI Red Team
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:23:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips
Medium
3 Brain-Dead Bugs Making Me Thousands in 2026
How to Find Low hanging fruits
25 views
Daily Writeups
⤷ Title: You’re Approaching a Cybersecurity Career the Wrong Way — Here’s What Actually Works
════════════════════════
𐀪 Author: networkdavit
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:32:43 GMT
════════════════════════
⌗ Tags: #careers #infosec #career_advice #cybersecurity #cybersecurity_training
Medium
You’re Approaching a Cybersecurity Career the Wrong Way — Here’s What Actually Works
If you’re trying to break into cybersecurity by collecting certifications, binge-watching hacking tutorials, and applying to 200 jobs with…
17 views
Daily Writeups
⤷ Title: Guided Pentest: Web [TryHackMe]
════════════════════════
𐀪 Author: Amr Sebie
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:07:05 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #guided_pentestweb #ctf_writeup #tryhackme
Medium
Guided Pentest: Web [TryHackMe]
Lab link: https://tryhackme.com/room/guidedpentestweb
15 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
════════════════════════
𐀪 Author: Azhar Aufa
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:20:57 GMT
════════════════════════
⌗ Tags: #web_security_academy #sql_injection #portswigger_lab
Medium
PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
Di lab ini, tujuannya sederhana: menemukan password administrator untuk login di My Account dengan celah SQL Injection menggunakan teknik…
24 views
Daily Writeups
⤷ Title: WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:39:29 +0000
════════════════════════
⌗ Tags: #Malware #brute force attack #Cyber Security #EDR evasion #File Share Encryption #infosec #network_security #No Local Execution #Remote Ransomware #SMB Exploitation #Sophos Counter Threat Unit #WantToCry
Daily CyberSecurity
WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
Sophos exposes WantToCry, a remote ransomware campaign that avoids EDR by using brute-forced SMB shares to read, encrypt, and rewrite files from afar.
24 views
Daily Writeups
⤷ Title: Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:03:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #sql_injection #ai_assisted #google_gemma
Medium
Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
AI-assisted SQL Injection testing against a deliberately vulnerable e-commerce application.
22 views
Daily Writeups
⤷ Title: Stop Googling Bash Syntax: The Only 50 Linux Commands You Actually Need to Know
════════════════════════
𐀪 Author: The4byss
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:49:38 GMT
════════════════════════
⌗ Tags: #hacking #linux #linux_tutorial #linux_commands
Medium
Stop Googling Bash Syntax: The Only 50 Linux Commands You Actually Need to Know
Imagine this: You’re deploying a new app, or troubleshooting a broken server, or just trying to navigate a remote database. You open the…
16 views
Daily Writeups
⤷ Title: Top 5 Mistakes Small Businesses Make With Cybersecurity
════════════════════════
𐀪 Author: Dureshahwar
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:55:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #small_business #data_security #infosec
Medium
Top 5 Mistakes Small Businesses Make With Cybersecurity
Most breaches do not happen because of sophisticated attacks. They happen because of
14 views
Daily Writeups
⤷ Title: What is a Vulnerability Assessment and Why Your Business Needs One
════════════════════════
𐀪 Author: Dureshahwar
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:46:36 GMT
════════════════════════
⌗ Tags: #business_tips #small_business #cybersecurity #data_security #infosec
Medium
What is a Vulnerability Assessment and Why Your Business Needs One
You don’t have to be a tech expert to protect your business, but you do need to know where you’re exposed.
17 views
Daily Writeups
⤷ Title: TryHackMe write-up: RootMe
════════════════════════
𐀪 Author: Viktor Chalyi
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:58:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_rootme #tryhackme
Medium
TryHackMe write-up: RootMe
Room
21 views
Daily Writeups
⤷ Title: Passing the Web Red Team Analyst
════════════════════════
𐀪 Author: The Husky Hacker
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:48:29 GMT
════════════════════════
⌗ Tags: #cyberwarfare_labs #ethical_hacking
Medium
Passing the Web Red Team Analyst
This was actually a pretty good exam. I've been lacking in attacks, and this course covered them very well. And passing the MFA was also a…
30 views
Daily Writeups
⤷ Title: Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:05:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anti_malware Client Version 4.18.26040.7 #CVE_2026_41091 Update #CVE_2026_45498 Denial of Service #Defender Security Advisory #Microsoft Defender Privilege Escalation #Microsoft Security Updates 2026 #Patch Verification Guide #System Level Privilege Escalation #Windows Endpoint Patch
Information Security News
Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
Microsoft has formally disseminated a security advisory detailing the successful remediation of critical vulnerabilities identified within the Microsoft
25 views
Daily Writeups
⤷ Title: The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against “YellowKey” BitLocker Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:45:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #autofstx.exe Registry Patch #BitLocker Bypass Vulnerability #CVE_2026_45585 Windows 11 #FsTx Auto Recovery Utility #MSRC Hotfix Guide #Physical Access Data Theft #Pre_Boot Authentication PIN #TPM Only Exploitation #Windows Recovery Environment #YellowKey WinRE Mitigation Script
Information Security News
The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against "YellowKey" BitLocker Bypass
Historically, independent security researchers bypassed standard coordinate disclosure protocols to directly publish an unhedged vulnerability residing within the
14 views
Daily Writeups
⤷ Title: The Reddit Clone: Meta Secretly Launches “Forum” App to Unbundle Facebook Groups
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:27:55 +0000
════════════════════════
⌗ Tags: #Technology #AI Ask Framework #Algorithmic Feeds Unbundling #Group Moderation Tools #High Fidelity Human Insight #Identity Federation Authentication #Knowledge Silo Extraction #Matt Navarra Leak #Meta Forum App Facebook Groups #Reddit Competitor Standalone Community Platform #Standalone Discussion Forums
Information Security News
The Reddit Clone: Meta Secretly Launches "Forum" App to Unbundle Facebook Groups
Devoid of any grand institutional pageantry or official marketing campaigns, Meta has surreptitiously debuted a nascent application designated
11 views
Daily Writeups
⤷ Title: Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:32:47 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Poisoning #Cross_Ecosystem Malice #Cyber Security #devdojo/wave #GitHub Actions Backdoor #infosec #package.json Exploit #PHP Composer #Postinstall Script #Socket Security #Starter Kits #supply chain attack
Daily CyberSecurity
Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
12 views
Daily Writeups
⤷ Title: Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:24:14 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Composer Backdoor #Credential Harvesting #Cyber Security #DevOps Security #flipboxstudio #info_stealer #Laravel Lang #PHP RCE #supply chain attack
Daily CyberSecurity
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.
19 views
Daily Writeups
⤷ Title: The Beginner Bug Hunter Mindset Nobody Teaches
════════════════════════
𐀪 Author: Drishti Pandey
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:49:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #web_security #cybersecurity #bug_bounty
Medium
The Beginner Bug Hunter Mindset Nobody Teaches
The hardest part of bug hunting isn’t technical. It’s learning how to think.
16 views