Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:38:04 GMT
════════════════════════
⌗ Tags: #api #api_security #owasp_api_security_top_10
Medium
Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
This is the final post in my vuln-bank series. Over the past four weeks I have worked through recon, JWT attacks, rate limiting, and PIN…
27 views
Daily Writeups
⤷ Title: AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 27 May 2026 13:15:52 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:18:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31431 #CVE_2026_43284 #CVE_2026_43500 #Linux Kernel #Moxa #privilege escalation #security advisory
Daily CyberSecurity
Linux Kernel Vulnerabilities Trigger Moxa Security Advisory
Learn about the new Moxa Linux kernel vulnerabilities (CVE-2026-43284). Discover how to apply interim mitigations to prevent privilege escalation.
23 views
Daily Writeups
⤷ Title: Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Cyber Security #Cyble #FreePBX #INJ3CTOR3 #JOMANGY #VoIP Toll Fraud #webshell
Daily CyberSecurity
Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
Cyble researchers uncover a widespread FreePBX exploitation campaign by INJ3CTOR3 deploying the novel JOMANGY webshell for toll fraud.
12 views
Daily Writeups
⤷ Title: NVIDIA Releases Critical Security Patches for AI Frameworks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_33255 #deserialization flaw #Isaac Launchable #Linux Security #nvidia #Security Patches #TensorRT_LLM
Daily CyberSecurity
NVIDIA Releases Critical Security Patches for AI Frameworks
NVIDIA released updates fixing severe NVIDIA TensorRT-LLM vulnerabilities and Isaac Launchable flaws. Patch your active systems today.
21 views
Daily Writeups
⤷ Title: Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
Daily CyberSecurity
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.
11 views
Daily Writeups
⤷ Title: Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:30:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
Wide Recon, Deep Impact: Finding HIGH & MEDIUM Severity Bugs in an Enterprise SaaS Platform
Target Overview
9 views
Daily Writeups
⤷ Title: My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
════════════════════════
𐀪 Author: MRKNIGHT-NIDU
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:21:37 GMT
════════════════════════
⌗ Tags: #zero_day #short_story #hacking #cve #bug_bounty
Medium
My First CVE! The Journey to Discovering CVE-2026–46620 in e107 CMS
Hey yo guys!
10 views
Daily Writeups
⤷ Title: Day 3 — Content Discovery & Attack Surface Mapping
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #web_security #infosec #api #cybersecurity #bug_bounty
Medium
Day 3 — Content Discovery & Attack Surface Mapping
Now comes the stage where real bug hunting begins. Because finding subdomains is only half the job.
7 views
Daily Writeups
⤷ Title: Your Android App’s FileProvider Might Be Exposing Your Entire Filesystem — 4 Real Patterns I Found
════════════════════════
𐀪 Author: Yehor Mamaiev
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:05:29 GMT
════════════════════════
⌗ Tags: #security #application_security #open_source #mobile_security #android
Medium
Your Android App’s FileProvider Might Be Exposing Your Entire Filesystem — 4 Real Patterns I Found
Android’s `FileProvider` is supposed to be the secure way to share files between apps. Instead of exposing raw `file://` URIs, you create…
8 views
Daily Writeups
⤷ Title: What is Re-Testing?
════════════════════════
𐀪 Author: Little_Sun4lower
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:09:24 GMT
════════════════════════
⌗ Tags: #penetration_testing #security_testing #application_security #ethical_hacking #cybersecurity
Medium
What is Re-Testing?
A penetration test is completed.
The report is delivered.
The client implements the fixes.
6 views
Daily Writeups
⤷ Title: Transforma Tu Terminal en el Setup de un Hacker Profesional
════════════════════════
𐀪 Author: Santiago Peñaranda Mejia
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:02:17 GMT
════════════════════════
⌗ Tags: #linux_tutorial #hacking #life_hacking #operating_systems #linux
Medium
Transforma Tu Terminal en el Setup de un Hacker Profesional
Cómo configurar Linux desde cero sin morir en el intento
7 views
Daily Writeups
⤷ Title: Understanding Network Attacks Through the OSI Model
════════════════════════
𐀪 Author: LeiFeng
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:58:13 GMT
════════════════════════
⌗ Tags: #network_security #infosec #osi_model #cybersecurity
Medium
Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain & Defense Configuration Guide
中文版
6 views
Daily Writeups
⤷ Title: 從OSI七層理解網路攻擊
════════════════════════
𐀪 Author: LeiFeng
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:31:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #osi_model #network_security #infosec
Medium
從OSI七層理解網路攻擊
第二篇：可視化攻擊流程與防禦配置指南
11 views
Daily Writeups
⤷ Title: Top 10 Pen Testing Companies in 2026
════════════════════════
𐀪 Author: Tech and Business Blog
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:48:22 GMT
════════════════════════
⌗ Tags: #software_development #penetration_testing #business
Medium
Top 10 Pen Testing Companies in 2026
Penetration testing helps organizations identify exploitable vulnerabilities before attackers use them in real-world attacks. Companies use…
8 views
Daily Writeups
⤷ Title: TryHackMe: Recruit Room Write-up
════════════════════════
𐀪 Author: Puspendu sana
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:27:33 GMT
════════════════════════
⌗ Tags: #ctf_writeup #puspendusana #web_pentester #recruittryhackme #tryhackme
Medium
TryHackMe: Recruit Room Write-up
In this write-up, I will walk you through how I successfully solved the Recruit room on TryHackMe. This challenge involves exploiting a…
16 views
Daily Writeups
⤷ Title: XSS Introduction Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:13:49 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #tryhackme_writeup #tryhackme #xss_vulnerability
Medium
XSS Introduction Walkthrough Notes | TryHackMe
Understanding XSS types and how scripts affect users and data
17 views
Daily Writeups
⤷ Title: Python summer internship with certificate for freshers
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:21:10 GMT
════════════════════════
⌗ Tags: #python #python3 #ethical_hacking #python_programming #cybersecurity
Medium
Python summer internship with certificate for freshers
A Python Summer Internship for Freshers is one of the most valuable stepping stones for students and recent graduates who want to enter the…
26 views
Daily Writeups
⤷ Title: Preventing Business Email Compromise Through Strong Email Security
════════════════════════
𐀪 Author: Tvmoffensobacklink
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:40:49 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #ethical_hacking #cyber_security_awareness #cybersecurity
Medium
Preventing Business Email Compromise Through Strong Email Security
Email remains one of the most targeted communication channels in modern organizations. Cybercriminals continue to exploit weak…
40 views
Daily Writeups
⤷ Title: FBI Issues Alert on Kali365 Phishing Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 09:01:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #FBI alert #Internet Crime Complaint Center #Kali365 #MFA Bypass #Microsoft 365 #OAuth tokens #Phishing_as_a_Service
Daily CyberSecurity
FBI Issues Alert on Kali365 Phishing Platform
The FBI issued an alert on the new Kali365 phishing platform. Learn how this PhaaS kit steals Microsoft 365 tokens and bypasses MFA.
34 views
Daily Writeups
⤷ Title: How I Discovered Critical Bugs in an Android Employee Management App
════════════════════════
𐀪 Author: MR SHAN
════════════════════════
ⴵ Time: Wed, 27 May 2026 10:53:04 GMT
════════════════════════
⌗ Tags: #mobile #cybersecurity #bugbounty_writeup #security #bug_bounty
Medium
How I Discovered Critical Bugs in an Android Employee Management App
Hey folks,
19 views