Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Architectural Refinements and Feature Modernization in the Latest Windows 11 Preview Deployment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:47:02 +0000
════════════════════════
⌗ Tags: #Windows #Dev Drive GB provisioning #dual Bluetooth audio streaming #Microsoft Update Catalog download #parallel camera video ingestion #Start Menu performance fix #USB3 protocol stack hardening #Windows 11 24H2 patches #Windows 11 build 26100.8524 #Windows 11 KB5089573 update #Windows 11 May C preview
Information Security News
Windows 11 KB5089573 Update Adds Dual Bluetooth Audio
Microsoft releases Windows 11 KB5089573 update preview. Discover how it enables dual Bluetooth audio streaming, parallel camera ingestion, and speed fixes.
29 views
Daily Writeups
⤷ Title: Global Malicious AI Installer Campaign Targets Developer Workstations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:37:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Claude Code #developer security #EclecticIQ #Fileless Malware #Gemini CLI #Infostealer Campaign #SEO Poisoning
16 views
Daily Writeups
⤷ Title: One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
════════════════════════
𐀪 Author: Philip Garabandic
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:20:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #openclaw #appsec #ai #bug_bounty
Medium
One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
Introduction
10 views
Daily Writeups
⤷ Title: GKeyhunter Pro: Revolutionizing Gemini API Key Reconnaissance and Impact Demonstration for Bug…
════════════════════════
𐀪 Author: Md Tanjimul Islam Sifat
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:47:14 GMT
════════════════════════
⌗ Tags: #ai_tools #bug_bounty_tips #bug_bounty #cybersecurity #bug_bounty_writeup
Medium
GKeyhunter Pro: Revolutionizing Gemini API Key Reconnaissance and Impact Demonstration for Bug…
Discovering an exposed API key during a bug bounty assessment is a solid find. However, submitting a report that simply says “I found an…
6 views
Daily Writeups
⤷ Title: Reporting Infrastructure & Helping Victims — Inside The Scam Industry (Part 8)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:25:23 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #true_crime #security #osint
Medium
🚨 Reporting Infrastructure & Helping Victims — Inside The Scam Industry (Part 8)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
6 views
Daily Writeups
⤷ Title: The crypto theft that changed everything
════════════════════════
𐀪 Author: Steven Boykey Sidley
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:10:50 GMT
════════════════════════
⌗ Tags: #defi #cybersecurity #hacking #cryptocurrency #cybercrime
Medium
The crypto theft that changed everything
(image: via Currency News)
3 views
Daily Writeups
⤷ Title: Building a UART Monitor with ESP32 and OLED
════════════════════════
𐀪 Author: Harshit Saxena
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:09:40 GMT
════════════════════════
⌗ Tags: #pentesting #embedded_systems #hacking #esp32 #uart
Medium
Building a UART Monitor with ESP32 and OLED
UART is one of those things people always hear about when they step into embedded systems or IoT pentesting. Today, I used an ESP32 and an…
7 views
Daily Writeups
⤷ Title: AI Penetration Testing Isn’t Replacing Hackers… It’s Replacing Bottlenecks
════════════════════════
𐀪 Author: Sonali Sood
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:53:11 GMT
════════════════════════
⌗ Tags: #data_security #pentesting #penetration_testing #information_security #security
Medium
AI Penetration Testing Isn’t Replacing Hackers… It’s Replacing Bottlenecks
Most companies still treat penetration testing like an annual ritual.
4 views
Daily Writeups
⤷ Title: The 3 Types of Penetration Testing, and Why Most Companies Choose the Wrong One
════════════════════════
𐀪 Author: Sonali Sood
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:53:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_security #pentesting #defensive_security #security
Medium
The 3 Types of Penetration Testing, and Why Most Companies Choose the Wrong One
Most companies think penetration testing is a checkbox. Run a scan. Get a PDF. Pass compliance. Move on.
6 views
Daily Writeups
⤷ Title: A Deep Dive into OAuth and OAuth Pentesting #2:Implicit Flow
════════════════════════
𐀪 Author: Shaunak Natu
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:11:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #oauth2
Medium
A Deep Dive into OAuth and OAuth Pentesting #2:Implicit Flow
Welcome to the second part of the series. As I mentioned in the first part, we are going to explore a very simple OAuth flow. It’s called…
9 views
Daily Writeups
⤷ Title: CTF collection Vol.1 — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:08:32 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #ctf_collection_vol_1
Medium
CTF collection Vol.1 — TryHackMe Walkthrough
Task 2: What does the base said?
15 views
Daily Writeups
⤷ Title: The 9.9 Billion Password Problem
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:58:35 GMT
════════════════════════
⌗ Tags: #tech #ethical_hacking #information_security #cybersecurity #data_breach
Medium
The 9.9 Billion Password Problem
Master the mechanics of Crunch, CeWL, and Hashcat rules — and learn how to stop billions of automated login attempts….
28 views
Daily Writeups
⤷ Title: Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:38:04 GMT
════════════════════════
⌗ Tags: #api #api_security #owasp_api_security_top_10
Medium
Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
This is the final post in my vuln-bank series. Over the past four weeks I have worked through recon, JWT attacks, rate limiting, and PIN…
27 views
Daily Writeups
⤷ Title: AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 27 May 2026 13:15:52 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:18:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31431 #CVE_2026_43284 #CVE_2026_43500 #Linux Kernel #Moxa #privilege escalation #security advisory
Daily CyberSecurity
Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
Learn about the new Moxa Linux kernel vulnerabilities (CVE-2026-43284). Discover how to apply interim mitigations to prevent privilege escalation.
23 views
Daily Writeups
⤷ Title: Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Cyber Security #Cyble #FreePBX #INJ3CTOR3 #JOMANGY #VoIP Toll Fraud #webshell
Daily CyberSecurity
Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
Cyble researchers uncover a widespread FreePBX exploitation campaign by INJ3CTOR3 deploying the novel JOMANGY webshell for toll fraud.
12 views
Daily Writeups
⤷ Title: NVIDIA Releases Critical Security Patches for AI Frameworks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_33255 #deserialization flaw #Isaac Launchable #Linux Security #nvidia #Security Patches #TensorRT_LLM
Daily CyberSecurity
NVIDIA Releases Critical Security Patches for AI Frameworks
NVIDIA released updates fixing severe NVIDIA TensorRT-LLM vulnerabilities and Isaac Launchable flaws. Patch your active systems today.
21 views
Daily Writeups
⤷ Title: Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
Daily CyberSecurity
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.
11 views
Daily Writeups
⤷ Title: Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:30:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
Target Overview
9 views
Daily Writeups
⤷ Title: My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
════════════════════════
𐀪 Author: MRKNIGHT-NIDU
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:21:37 GMT
════════════════════════
⌗ Tags: #zero_day #short_story #hacking #cve #bug_bounty
Medium
My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
Hey yo guys!
10 views
Daily Writeups
⤷ Title: Day 3 — Content Discovery & Attack Surface Mapping
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #web_security #infosec #api #cybersecurity #bug_bounty
Medium
Day 3 — Content Discovery & Attack Surface Mapping
Now comes the stage where real bug hunting begins. Because finding subdomains is only half the job.
7 views