Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Zero-Day Exploitation: Rapid7 Exposes Remote Code Execution Vulnerability in Gogs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
Information Security News
Gogs Argument Injection Vulnerability Grants Server RCE
Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.
13 views
Daily Writeups
⤷ Title: Fiscal Realignment: Public Interest Registry Initiates Price Hike for .ORG Domains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:30:27 +0000
════════════════════════
⌗ Tags: #Technology #.org domain price increase #bulk domain asset management #Cloudflare at_cost domain pricing #domain portfolio risk mitigation #ICANN domain registration fees #legacy TLD price modifications #lock in multi_year domain renewals #open_source organization website costs #Porkbun registrar price updates #Public Interest Registry wholesale tariff hike
Information Security News
.org Domain Price Increase: Rates Hike Beginning June 1
The Public Interest Registry triggers a wholesale .org domain price increase on June 1. Lock in long-term renewals now before retail rates inflate.
17 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
16 views
Daily Writeups
⤷ Title: Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)
════════════════════════
𐀪 Author: Mado
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:10 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #infosec #penetration_testing #bug_bounty
Medium
Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)🤫
Client-Side Injection(Advanced): How Small Bugs Lead To Big Bounties(SSRF , Prev Esc , KeyLogger , 30XSS)
18 views
Daily Writeups
⤷ Title: How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:14:46 GMT
════════════════════════
⌗ Tags: #nodejs #vulnerability #cybersecurity #infosec #bug_bounty
Medium
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a week, you expect it to be bulletproof…
14 views
Daily Writeups
⤷ Title: The Live Demo Trap That Forced Me to Master Flutter Web Routing
════════════════════════
𐀪 Author: Muhammadomar
════════════════════════
ⴵ Time: Fri, 29 May 2026 10:48:26 GMT
════════════════════════
⌗ Tags: #flutter #bug_bounty #dart #android #ios
Medium
The Live Demo Trap That Forced Me to Master Flutter Web Routing
Picture this. You’re in a high-stakes technical interview, sharing your screen, demoing a production-ready application you built. The UI is…
13 views
Daily Writeups
⤷ Title: I Got Tired Of Running The Same Recon Commands Every Day — So I Built This
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 29 May 2026 10:41:54 GMT
════════════════════════
⌗ Tags: #linux #security #cybersecurity #hacking #bug_bounty
Medium
🤖 I Got Tired Of Running The Same Recon Commands Every Day — So I Built This
If you’ve spent any time hunting on bug bounty programs, you’ve probably experienced this.
12 views
Daily Writeups
⤷ Title: How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:14:44 GMT
════════════════════════
⌗ Tags: #nodejs #vulnerability #cybersecurity #infosec #bug_bounty
Medium
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a week, you expect it to be bulletproof…
11 views
Daily Writeups
⤷ Title: Can a 35 Year Old Join an Ethical Hacking Course in Delhi and Actually Get Placed?
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Fri, 29 May 2026 10:15:07 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking
Medium
Can a 35 Year Old Join an Ethical Hacking Course in Delhi and Actually Get Placed?
It is one query that frequently finds its way to the inboxes of Cyberyaan that people might think should not be coming so frequently. This…
22 views
Daily Writeups
⤷ Title: I Attacked My Own Machine with Hydra and Caught It Live in Splunk
════════════════════════
𐀪 Author: NIVED PV
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:29:07 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #hacking #ethical_hacking #splunk
Medium
I Attacked My Own Machine with Hydra and Caught It Live in Splunk
SECTION 1:
24 views
Daily Writeups
⤷ Title: I Got Hacked. Here’s What I Wish I’d Known Sooner.
════════════════════════
𐀪 Author: synnefo academy
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:19:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #cybercrime #ethical_hacking #cyber_security_awareness
Medium
I Got Hacked. Here’s What I Wish I’d Known Sooner.
And why the most recession-proof career of our generation is hiding in plain sight
12 views
Daily Writeups
⤷ Title: A $10,000 Bug. One JSON Field. Every Account on the Platform.
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:19:26 GMT
════════════════════════
⌗ Tags: #hacking #software_engineering #programming #technology #cybersecurity
Medium
A $10,000 Bug. One JSON Field. Every Account on the Platform.
One intercepted request. One parameter swap. Full access to any account on the platform.
16 views
Daily Writeups
⤷ Title: THM-WALKTHROUGH
════════════════════════
𐀪 Author: Alchemist
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:34:26 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #medium #tryhackme #cybersecurity #cyber
Medium
THM-WALKTHROUGH
Guided Pentest: Web
13 views
Daily Writeups
⤷ Title: Interceptor CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:59:48 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #ctf_walkthrough #tryhackme_walkthrough #tryhackme #ctf_writeup
Medium
Interceptor CTF Notes | TryHackMe
Chaining web flaws to gain deeper access and system control
15 views
Daily Writeups
⤷ Title: Sick OS- Writeup
════════════════════════
𐀪 Author: Sarath Chandran R S
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:06:22 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #vulnhub #sicko #ctf_writeup #pentesting
Medium
Sick OS- Writeup
In this writeup, I will take you through the detailed steps and techniques that I used to exploit and gain root access to this machine and…
32 views
Daily Writeups
⤷ Title: Social Engineering Explained: Why Hackers Attack Humans Before Systems
════════════════════════
𐀪 Author: Shalu
════════════════════════
ⴵ Time: Fri, 29 May 2026 10:03:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #social_engineering #information_security #networking
Medium
Social Engineering Explained: Why Hackers Attack Humans Before Systems
“The biggest vulnerability in cybersecurity isn’t always the firewall. Sometimes, it’s a tired employee clicking a link at 9:47 AM on a…
39 views
Daily Writeups
⤷ Title: New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:01:59 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Romanian Hacker Sentenced to Prison Following Government Cyberattacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:54:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CCIPS #Cybercrime #Department of Justice #FBI Investigation #identity theft #initial access broker #Network Intrusion
Daily CyberSecurity
Romanian Hacker Sentenced to Prison Following Government Cyberattacks
A Romanian hacker sentenced to prison following an identity theft conviction and selling access to a US government network infrastructure.
24 views
Daily Writeups
⤷ Title: Architectural Serenity: Microsoft Redefines Copilot with a Monochromatic Corporate Aesthetic
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:00 +0000
════════════════════════
⌗ Tags: #Technology #adaptive text input UI changes #Copilot Microsoft 365 redesign #corporate AI productivity tool formatting #dynamic prompt surface behavior #enterprise Copilot vs consumer layout #human computer interaction design updates #monochromatic Copilot interface look #office suite workflow legibility #unified Microsoft 365 sidebar #Word Excel PowerPoint sidebar layout
Daily CyberSecurity
Architectural Serenity: Microsoft Redefines Copilot with a Monochromatic Corporate Aesthetic
Microsoft rolls out a major Copilot Microsoft 365 redesign. Discover the clean, monochromatic workspace, unified sidebar layout, and dynamic prompt surface.
17 views
Daily Writeups
⤷ Title: PureLogs Info Stealer Campaign Exploits Trusted Windows Process
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:02:45 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #FortiGuard Labs #info_stealer #Phishing Campaign #Process Hollowing #PureLogs #threat intelligence
Daily CyberSecurity
PureLogs Info Stealer Campaign Exploits Trusted Windows Process
FortiGuard Labs exposes a highly evasive PureLogs info stealer campaign utilizing process hollowing and fileless execution.
13 views