Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: VulnOSv2 Walkthrough — Drupalgeddon2 to Root via OverlayFS
════════════════════════
𐀪 Author: Ajaydevsv
════════════════════════
ⴵ Time: Sun, 31 May 2026 06:21:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #drupal #privilege_escalation #penetration_testing
Medium
VulnOSv2 Walkthrough — Drupalgeddon2 to Root via OverlayFS
Introduction
20 views
Daily Writeups
⤷ Title: Wgel CTF — TryHackMe
════════════════════════
𐀪 Author: Subrat Keshari Sahu
════════════════════════
ⴵ Time: Sun, 31 May 2026 06:52:48 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #ctf #ctf_writeup #tryhackme_walkthrough
Medium
Wgel CTF — TryHackMe
Hello everyone. I am going to help you to complete this room.
19 views
Daily Writeups
⤷ Title: Subdomain Takeover: The Silent Killer of Web Security — Tryhackme Lab Walkthrough
════════════════════════
𐀪 Author: Meheraz hossen siyam
════════════════════════
ⴵ Time: Sun, 31 May 2026 06:49:51 GMT
════════════════════════
⌗ Tags: #subdomain_takeover #tryhackme_walkthrough #tryhackme #labs
Medium
Subdomain Takeover: The Silent Killer of Web Security — Tryhackme Lab Walkthrough
the TryHackMe The Ultimate Subdomain Takeover Guide: Cracking Lab
22 views
Daily Writeups
⤷ Title: Why Companies Pay People to Hack Their Systems
════════════════════════
𐀪 Author: Flexi Dev Studio
════════════════════════
ⴵ Time: Sun, 31 May 2026 06:13:47 GMT
════════════════════════
⌗ Tags: #technology #ethical_hacking #cybersecurity
Medium
Why Companies Pay People to Hack Their Systems
Why Companies Pay People to Hack Their Systems One thing I learned recently in my Digital Technology class is ethical hacking, and honestly, before this class, I never really understood why ethical …
36 views
Daily Writeups
⤷ Title: SolyxImmortal Info Stealer Exploits Systems via Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:53:47 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Discord Webhooks #information stealer #Python Malware #SolyxImmortal
Daily CyberSecurity
SolyxImmortal Info Stealer Exploits Systems via Discord
The SolyxImmortal info stealer targets user data. Learn how this Python malware steals passwords and abuses Discord webhooks to exfiltrate files.
31 views
Daily Writeups
⤷ Title: Inside a Massive Elderly Lottery Fraud Scam
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:19:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #DOJ Sentencing #Elder Fraud #Lead List Broker #Troy Murray #Wire Fraud
Daily CyberSecurity
Inside a Massive Elderly Lottery Fraud Scam
A massive elderly lottery fraud scam broker receives a prison sentence for a DOJ wire fraud conspiracy that targeted millions.
21 views
Daily Writeups
⤷ Title: Day 7 — Enumerating Applications on Web Servers
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:43:08 GMT
════════════════════════
⌗ Tags: #web_security #information_security #bug_bounty #penetration_testing #cybersecurity
Medium
Day 7 — Enumerating Applications on Web Servers
Finding the Hidden Applications Attackers Don’t Want You to Miss
25 views
Daily Writeups
⤷ Title: I Found a Bug That Could Silently Flip Anyone’s Content Preferences on a Major Adult Site.
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:15:00 GMT
════════════════════════
⌗ Tags: #csrf #cybersecurity #funny #bug_bounty
Medium
I Found a Bug That Could Silently Flip Anyone’s Content Preferences on a Major Adult Site. It Was Out of Scope.
A CSRF vulnerability, three lines of HTML, zero dollars, and one researcher crying in the corner.
17 views
Daily Writeups
⤷ Title: Completely Stuck? Here’s How I Got Out of a Three-Week Dry Spell
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:14:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #bug_bounty_hunter #bug_bounty_writeup #bugbounty_writeup
Medium
Completely Stuck? Here’s How I Got Out of a Three-Week Dry Spell
No bugs. No hope. Just one mindset shift that changed everything.
13 views
Daily Writeups
⤷ Title: TryHackMe — Jr Penetration Tester Learning Path
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:12:32 GMT
════════════════════════
⌗ Tags: #tryhackme #jpt #bug_bounty #pentesting #owasp
Medium
TryHackMe — Jr Penetration Tester Learning Path
TryHackMe — Jr Penetration Tester Learning Path is a complete guide for aspiring pentesters and even experienced professionals.
18 views
Daily Writeups
⤷ Title: LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications
════════════════════════
𐀪 Author: COVBEC
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:14:40 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #ethical_hacking #hacking #red_teaming
Medium
LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications and How Businesses Can Protect…
LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications and How Businesses Can Protect Themselves Artificial Intelligence (AI) is transforming how businesses …
18 views
Daily Writeups
⤷ Title: Compromising Active Directory Through Failures in Password Security | HackTheBox Skills Assessment
════════════════════════
𐀪 Author: Delta
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:41:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
Compromising Active Directory Through Failures in Password Security | HackTheBox Skills Assessment
Effective password policies and password security play a ridiculously instrumental role in system administration, but they play an even…
14 views
Daily Writeups
⤷ Title: The Denial-of-Attention Attack
════════════════════════
𐀪 Author: Leon Marks
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:48:27 GMT
════════════════════════
⌗ Tags: #infosec #artificial_intelligence #cybersecurity #systems_thinking #risk_management
Medium
The Denial-of-Attention Attack
Cybersecurity has spent the last twenty years preparing for denial-of-service attacks against infrastructure.
16 views
Daily Writeups
⤷ Title: Active Directory Objects: Users, Computers, Groups, and Service Accounts
════════════════════════
𐀪 Author: Atharva Deshmukh
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:55:36 GMT
════════════════════════
⌗ Tags: #active_directory #red_team #cybersecurity #information_security #penetration_testing
Medium
Active Directory Objects: Users, Computers, Groups, and Service Accounts
Understanding Active Directory objects is one of the most important foundations in AD security. This is Blog 3 of a structured series going…
26 views
Daily Writeups
⤷ Title: Password Cracking | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #tryhackme #password_cracking
Medium
Password Cracking | TryHackMe
Learn how passwords are hashed, identify hash types, and crack them with Hashcat and John the Ripper.
38 views
Daily Writeups
⤷ Title: Web Server Attacks — II | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #tryhackme #web_server_attacks #cybersecurity #pentesting
Medium
Web Server Attacks — II | TryHackMe
Attack IIS through fingerprinting, tilde enumeration, WebDAV shell upload, and learn automation.
43 views
Daily Writeups
⤷ Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
⌗ Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
⤷ Title: The Diminishing Returns of AI: Corporate Leaders Question Skyrocketing Expenditures
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:19:58 +0000
════════════════════════
⌗ Tags: #Technology #agentic workflow infrastructure budget impact #Axios Claude AI $500 million bill #Claude Enterprise API limit configuration #cloud computing billing threshold governance #corporate tech investment ROI friction #corporate tokenmaxxing spending habits #Enterprise AI token spending #IT budget resource mismanagement metrics #Microsoft Claude Code contract cancellations #Uber AI token cost optimization
Information Security News
Enterprise AI Token Spending Spirals: Inside the $500M Bill
An Axios report exposes soaring enterprise AI token spending, revealing how one company accidentally generated a massive $500 million Claude bill in a month.
29 views
Daily Writeups
⤷ Title: The Algorithmic Illusion: Threat Actors Weaponize Generative AI Shared Tunnels for Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
Information Security News
Shared AI Chat Malvertising: Fraudsters Weaponize ChatGPT & Claude
Hackers are deploying shared AI chat malvertising in Google Ads, exploiting trusted chatgpt.com and claude.ai links to infect users with malware.
21 views
Daily Writeups
⤷ Title: The Sabotage of Automation: Open-Source Project jqwik Poisoned Against AI Agents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:08:30 +0000
════════════════════════
⌗ Tags: #Technology #ANSI escape sequence terminal hiding #automated build log stream exploitation #Claude Code payload detection #indirect prompt injection software safety #Java testing dependencies boycott #jqwik hidden prompt injection #JUnit 5 platform alternative migration #Maven Central supply chain vulnerability #printMessageForCodingAgents source bytecode #protestware open source security risks
Information Security News
jqwik Hidden Prompt Injection Targets AI Coding Agents
Java testing library jqwik faces major developer backlash after version 1.10.0 deploys a hidden prompt injection payload aimed at tricking AI coding tools.
21 views
Daily Writeups
⤷ Title: Comet Backup Server Flaw Exposes Remote Customer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:56:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Comet Backup #CVE_2026_32999 #RCE vulnerability #Server Security #Software Patch
Daily CyberSecurity
Comet Backup Server Flaw Exposes Remote Customer Data
A critical Comet Backup RCE vulnerability has been found. Learn about the CVE-2026-32999 patch released to secure backup servers and user data.
21 views