Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
════════════════════════
𐀪 Author: Philip Garabandic
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:20:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #openclaw #appsec #ai #bug_bounty
Medium
One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
Introduction
10 views
Daily Writeups
⤷ Title: GKeyhunter Pro: Revolutionizing Gemini API Key Reconnaissance and Impact Demonstration for Bug…
════════════════════════
𐀪 Author: Md Tanjimul Islam Sifat
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:47:14 GMT
════════════════════════
⌗ Tags: #ai_tools #bug_bounty_tips #bug_bounty #cybersecurity #bug_bounty_writeup
Medium
GKeyhunter Pro: Revolutionizing Gemini API Key Reconnaissance and Impact Demonstration for Bug…
Discovering an exposed API key during a bug bounty assessment is a solid find. However, submitting a report that simply says “I found an…
6 views
Daily Writeups
⤷ Title: Reporting Infrastructure & Helping Victims — Inside The Scam Industry (Part 8)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:25:23 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #true_crime #security #osint
Medium
🚨 Reporting Infrastructure & Helping Victims — Inside The Scam Industry (Part 8)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
6 views
Daily Writeups
⤷ Title: The crypto theft that changed everything
════════════════════════
𐀪 Author: Steven Boykey Sidley
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:10:50 GMT
════════════════════════
⌗ Tags: #defi #cybersecurity #hacking #cryptocurrency #cybercrime
Medium
The crypto theft that changed everything
(image: via Currency News)
3 views
Daily Writeups
⤷ Title: Building a UART Monitor with ESP32 and OLED
════════════════════════
𐀪 Author: Harshit Saxena
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:09:40 GMT
════════════════════════
⌗ Tags: #pentesting #embedded_systems #hacking #esp32 #uart
Medium
Building a UART Monitor with ESP32 and OLED
UART is one of those things people always hear about when they step into embedded systems or IoT pentesting. Today, I used an ESP32 and an…
7 views
Daily Writeups
⤷ Title: AI Penetration Testing Isn’t Replacing Hackers… It’s Replacing Bottlenecks
════════════════════════
𐀪 Author: Sonali Sood
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:53:11 GMT
════════════════════════
⌗ Tags: #data_security #pentesting #penetration_testing #information_security #security
Medium
AI Penetration Testing Isn’t Replacing Hackers… It’s Replacing Bottlenecks
Most companies still treat penetration testing like an annual ritual.
4 views
Daily Writeups
⤷ Title: The 3 Types of Penetration Testing, and Why Most Companies Choose the Wrong One
════════════════════════
𐀪 Author: Sonali Sood
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:53:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_security #pentesting #defensive_security #security
Medium
The 3 Types of Penetration Testing, and Why Most Companies Choose the Wrong One
Most companies think penetration testing is a checkbox. Run a scan. Get a PDF. Pass compliance. Move on.
6 views
Daily Writeups
⤷ Title: A Deep Dive into OAuth and OAuth Pentesting #2:Implicit Flow
════════════════════════
𐀪 Author: Shaunak Natu
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:11:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #oauth2
Medium
A Deep Dive into OAuth and OAuth Pentesting #2:Implicit Flow
Welcome to the second part of the series. As I mentioned in the first part, we are going to explore a very simple OAuth flow. It’s called…
9 views
Daily Writeups
⤷ Title: CTF collection Vol.1 — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:08:32 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #ctf_collection_vol_1
Medium
CTF collection Vol.1 — TryHackMe Walkthrough
Task 2: What does the base said?
15 views
Daily Writeups
⤷ Title: The 9.9 Billion Password Problem
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:58:35 GMT
════════════════════════
⌗ Tags: #tech #ethical_hacking #information_security #cybersecurity #data_breach
Medium
The 9.9 Billion Password Problem
Master the mechanics of Crunch, CeWL, and Hashcat rules — and learn how to stop billions of automated login attempts….
28 views
Daily Writeups
⤷ Title: Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:38:04 GMT
════════════════════════
⌗ Tags: #api #api_security #owasp_api_security_top_10
Medium
Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
This is the final post in my vuln-bank series. Over the past four weeks I have worked through recon, JWT attacks, rate limiting, and PIN…
27 views
Daily Writeups
⤷ Title: AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 27 May 2026 13:15:52 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:18:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31431 #CVE_2026_43284 #CVE_2026_43500 #Linux Kernel #Moxa #privilege escalation #security advisory
Daily CyberSecurity
Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
Learn about the new Moxa Linux kernel vulnerabilities (CVE-2026-43284). Discover how to apply interim mitigations to prevent privilege escalation.
23 views
Daily Writeups
⤷ Title: Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Cyber Security #Cyble #FreePBX #INJ3CTOR3 #JOMANGY #VoIP Toll Fraud #webshell
Daily CyberSecurity
Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
Cyble researchers uncover a widespread FreePBX exploitation campaign by INJ3CTOR3 deploying the novel JOMANGY webshell for toll fraud.
12 views
Daily Writeups
⤷ Title: NVIDIA Releases Critical Security Patches for AI Frameworks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_33255 #deserialization flaw #Isaac Launchable #Linux Security #nvidia #Security Patches #TensorRT_LLM
Daily CyberSecurity
NVIDIA Releases Critical Security Patches for AI Frameworks
NVIDIA released updates fixing severe NVIDIA TensorRT-LLM vulnerabilities and Isaac Launchable flaws. Patch your active systems today.
21 views
Daily Writeups
⤷ Title: Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
Daily CyberSecurity
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.
11 views
Daily Writeups
⤷ Title: Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:30:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
Target Overview
9 views
Daily Writeups
⤷ Title: My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
════════════════════════
𐀪 Author: MRKNIGHT-NIDU
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:21:37 GMT
════════════════════════
⌗ Tags: #zero_day #short_story #hacking #cve #bug_bounty
Medium
My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
Hey yo guys!
10 views
Daily Writeups
⤷ Title: Day 3 — Content Discovery & Attack Surface Mapping
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #web_security #infosec #api #cybersecurity #bug_bounty
Medium
Day 3 — Content Discovery & Attack Surface Mapping
Now comes the stage where real bug hunting begins. Because finding subdomains is only half the job.
7 views
Daily Writeups
⤷ Title: Your Android App’s FileProvider Might Be Exposing Your Entire Filesystem — 4 Real Patterns I Found
════════════════════════
𐀪 Author: Yehor Mamaiev
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:05:29 GMT
════════════════════════
⌗ Tags: #security #application_security #open_source #mobile_security #android
Medium
Your Android App’s FileProvider Might Be Exposing Your Entire Filesystem — 4 Real Patterns I Found
Android’s `FileProvider` is supposed to be the secure way to share files between apps. Instead of exposing raw `file://` URIs, you create…
8 views
Daily Writeups
⤷ Title: What is Re-Testing?
════════════════════════
𐀪 Author: Little_Sun4lower
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:09:24 GMT
════════════════════════
⌗ Tags: #penetration_testing #security_testing #application_security #ethical_hacking #cybersecurity
Medium
What is Re-Testing?
A penetration test is completed.
The report is delivered.
The client implements the fixes.
6 views