Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Advanced Guide to Exploiting and Mitigating CORS in Bug Bounty Programs
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 27 May 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #technology #cybersecurity #hacking
Medium
Advanced Guide to Exploiting and Mitigating CORS in Bug Bounty Programs
Master WAF evasion techniques, exploitation of modern APIs, and chaining CORS vulnerabilities in bug bounty programs.
25 views
Daily Writeups
⤷ Title: Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield Bypass
════════════════════════
𐀪 Author: Ryuk0x01
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:44:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_bypass #cybersecurity #xss_attack #ctf
Medium
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield Bypass
Introduction
16 views
Daily Writeups
⤷ Title: I Automated My Entire Bug Bounty Recon Workflow — Here’s What I Learned
════════════════════════
𐀪 Author: Muhammadadnanthayyil
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:22:18 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #cybersecurity #automation #bug_bounty
Medium
I Automated My Entire Bug Bounty Recon Workflow — Here’s What I Learned
I Got Tired of Typing the Same Commands Every Night. So I Built AutoReconX.
16 views
Daily Writeups
⤷ Title: Browser Session Theft And Account Security Risks
════════════════════════
𐀪 Author: Geoffrey Wenger
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:41:15 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #hacking #technology #privacy
Medium
Browser Session Theft And Account Security Risks
Browser session theft can expose cloud, shopping, and social media accounts through stolen trust, connected apps, and unknown devices.
18 views
Daily Writeups
⤷ Title: TryHackMe: Ledger Write-up
════════════════════════
𐀪 Author: edbert sumicad
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:57:08 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #penetration_testing #active_directory_attack #network_penetration_test
Medium
TryHackMe: Ledger Write-up
Introduction
17 views
Daily Writeups
⤷ Title: TryHackMe: Boogeyman 2 | Write-Up
════════════════════════
𐀪 Author: Ash T
════════════════════════
ⴵ Time: Wed, 27 May 2026 00:26:59 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #information_security #cybersecurity #tryhackme
Medium
TryHackMe: Boogeyman 2 | Write-Up
This is a write-up and walkthrough for the Boogeyman 2 room.
24 views
Daily Writeups
⤷ Title: Guided Pentest: Web | TryHackMe Room Write-up
════════════════════════
𐀪 Author: 0x7ipher
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:20:20 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #the_red_raffle #jr_penetration_tester
Medium
Guided Pentest: Web | TryHackMe Room Write-up
Learn web app pentesting by chaining vulnerabilities from recon to full server compromise.
24 views
Daily Writeups
⤷ Title: Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_48207 #Deserialization Bypass #Pyfory #Python Security #Remote Code Execution
Daily CyberSecurity
Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
Discover how CVE-2026-48207, a critical PyFory deserialization policy bypass flaw, lets attackers execute remote code, and learn how to patch it now.
21 views
Daily Writeups
⤷ Title: Overhaul Your Site Defense: Concrete CMS Security Fixes Arrive in Version 9.5.1
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:22:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Concrete CMS #CSRF Protection #CVE_2026_8134 #Remote Code Execution #vulnerability patch #Web Security
Daily CyberSecurity
Overhaul Your Site Defense: Concrete CMS Security Fixes Arrive in Version 9.5.1
Concrete CMS dropped critical Concrete CMS security fixes in version 9.5.1 to eliminate remote code execution vulnerabilities. Update now.
18 views
Daily Writeups
⤷ Title: Unauthenticated Execution Threatens Kubernetes Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:03:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #CVE_2026_46614 #Fission Router #Kubernetes Security #Serverless Framework
Daily CyberSecurity
Unauthenticated Execution Threatens Kubernetes Clusters
A critical Fission router vulnerability (CVE-2026-46614) allows unauthenticated function invocation in Kubernetes. Learn how to patch it now.
17 views
Daily Writeups
⤷ Title: GitHub Patches Critical Flaws in Enterprise Server Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8606 #CVE_2026_9312 #GHES #github #GPG Key Rotation #security patch #ssrf
Daily CyberSecurity
GitHub Patches Critical Flaws in Enterprise Server Update
GitHub patches critical GitHub Enterprise Server vulnerabilities (CVE-2026-9312). Learn about key rotation and critical SSRF fixes.
12 views
Daily Writeups
⤷ Title: Dual Sandbox Bypasses Threaten PHP Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46633 #CVE_2026_46640 #PHP Security #Remote Code Execution #Sandbox Bypass #Twig Engine
Daily CyberSecurity
Dual Sandbox Bypasses Threaten PHP Applications
Twig project maintainers patched critical Twig RCE flaws allowing arbitrary code execution via sandbox bypasses. Update to 3.26.0.
8 views
Daily Writeups
⤷ Title: Windows Kernel Bug Exploits Browser Sandboxes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40369 #Kernel Exploit #Microsoft #Ori Nimron #Windows 11
Daily CyberSecurity
Windows Kernel Bug Exploits Browser Sandboxes
A dangerous Windows Kernel EoP vulnerability allows browser sandbox escapes. Public PoC exploit code is available on GitHub.
26 views
Daily Writeups
⤷ Title: BAC + CSRF
════════════════════════
𐀪 Author: Rajveer
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:00:03 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty #bug_bounty_writeup #broken_access_control #csrf
Medium
BAC + CSRF
It was a Self-Hosted program with limited scope, so I started exploring the main application
12 views
Daily Writeups
⤷ Title: The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:27:45 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bugbounty_writeup #bug_bounty_tips #bug_hunting #bug_bounty
Medium
The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
Everyone checks extensions. Nobody checks what happens after.
17 views
Daily Writeups
⤷ Title: TryHackMe Operation Endgame Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:25:02 GMT
════════════════════════
⌗ Tags: #active_directory_security #active_directory_attack #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
TryHackMe Operation Endgame Walkthrough
TL;DR Walkthrough of the TryHackMe Operation Endgame room.
16 views
Daily Writeups
⤷ Title: Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
════════════════════════
𐀪 Author: Brennayoungdtp
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:47:28 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #art #xs #writing #ai
Medium
Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
The way people consume video content has changed dramatically over the past few years. With faster internet, smarter devices, and rising…
30 views
Daily Writeups
⤷ Title: The Underminr Paradigm: Subverting DNS Filters via CDN Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:46:33 +0000
════════════════════════
⌗ Tags: #Information Security #ADAMnetworks threat intelligence #cloud command and control traffic #cross tenant CDN routing exploit #Encrypted Client Hello ECH security #legacy domain fronting comparison #outminr network monitoring tool #Protective DNS bypass #Server Name Indication SNI spoofing #shared infrastructure website blacklisting #Underminr DNS evasion technique
Information Security News
Underminr DNS Evasion Technique Bypasses Protective DNS
ADAMnetworks uncovers Underminr, a critical DNS evasion technique impacting 88 million domains by weaponizing cross-tenant routing on shared CDNs.
32 views
Daily Writeups
⤷ Title: Critical Security Defect Exploits NTFS Processing Architecture Within 7-Zip
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:42:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip 26.01 download #7_Zip CVE_2026_48095 patch #dynamic link library memory corruption #GitHub Security Lab GHSL_2026_140 #heap buffer write overflow #NTFS archive handler #remote code execution vulnerability #signature based fallback detection #vtable hijack exploit #Yaroslav Lobachevsky cyber security
Information Security News
7-Zip CVE-2026-48095 Patch: Fix Critical NTFS Code Execution
Update now to the 7-Zip CVE-2026-48095 patch. Discover how this critical heap overflow in the NTFS archive handler triggers remote code execution.
14 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:34:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_45250 kernel panic #FatGid local privilege escalation #FreeBSD setcred root exploit #FreeBSD_SA_26:18.setcred advisory #kern_setcred_copyin_supp_groups flaw #kernel stack buffer overflow #memory corruption gid_t mismatch #Supervisor Mode Access Prevention SMAP #Supervisor Mode Execution Prevention SMEP #zfs.ko gadget exploitation
Information Security News
Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
The FreeBSD security apparatus has successfully resolved a high-severity vulnerability, cataloged as CVE-2026-45250, within the setcred(2) system call architecture. This fundamental defect resided…
11 views