Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Day 7 — Enumerating Applications on Web Servers
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:43:08 GMT
════════════════════════
⌗ Tags: #web_security #information_security #bug_bounty #penetration_testing #cybersecurity
Medium
Day 7 — Enumerating Applications on Web Servers
Finding the Hidden Applications Attackers Don’t Want You to Miss
25 views
Daily Writeups
⤷ Title: I Found a Bug That Could Silently Flip Anyone’s Content Preferences on a Major Adult Site.
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:15:00 GMT
════════════════════════
⌗ Tags: #csrf #cybersecurity #funny #bug_bounty
Medium
I Found a Bug That Could Silently Flip Anyone’s Content Preferences on a Major Adult Site. It Was Out of Scope.
A CSRF vulnerability, three lines of HTML, zero dollars, and one researcher crying in the corner.
17 views
Daily Writeups
⤷ Title: Completely Stuck? Here’s How I Got Out of a Three-Week Dry Spell
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:14:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #bug_bounty_hunter #bug_bounty_writeup #bugbounty_writeup
Medium
Completely Stuck? Here’s How I Got Out of a Three-Week Dry Spell
No bugs. No hope. Just one mindset shift that changed everything.
13 views
Daily Writeups
⤷ Title: TryHackMe — Jr Penetration Tester Learning Path
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:12:32 GMT
════════════════════════
⌗ Tags: #tryhackme #jpt #bug_bounty #pentesting #owasp
Medium
TryHackMe — Jr Penetration Tester Learning Path
TryHackMe — Jr Penetration Tester Learning Path is a complete guide for aspiring pentesters and even experienced professionals.
17 views
Daily Writeups
⤷ Title: LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications
════════════════════════
𐀪 Author: COVBEC
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:14:40 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #ethical_hacking #hacking #red_teaming
Medium
LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications and How Businesses Can Protect…
LLM Red Teaming, AI Security & Vibe Coding Security: How Hackers Exploit AI-Powered Applications and How Businesses Can Protect Themselves Artificial Intelligence (AI) is transforming how businesses …
16 views
Daily Writeups
⤷ Title: Compromising Active Directory Through Failures in Password Security | HackTheBox Skills Assessment
════════════════════════
𐀪 Author: Delta
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:41:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
Compromising Active Directory Through Failures in Password Security | HackTheBox Skills Assessment
Effective password policies and password security play a ridiculously instrumental role in system administration, but they play an even…
13 views
Daily Writeups
⤷ Title: The Denial-of-Attention Attack
════════════════════════
𐀪 Author: Leon Marks
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:48:27 GMT
════════════════════════
⌗ Tags: #infosec #artificial_intelligence #cybersecurity #systems_thinking #risk_management
Medium
The Denial-of-Attention Attack
Cybersecurity has spent the last twenty years preparing for denial-of-service attacks against infrastructure.
16 views
Daily Writeups
⤷ Title: Active Directory Objects: Users, Computers, Groups, and Service Accounts
════════════════════════
𐀪 Author: Atharva Deshmukh
════════════════════════
ⴵ Time: Sun, 31 May 2026 07:55:36 GMT
════════════════════════
⌗ Tags: #active_directory #red_team #cybersecurity #information_security #penetration_testing
Medium
Active Directory Objects: Users, Computers, Groups, and Service Accounts
Understanding Active Directory objects is one of the most important foundations in AD security. This is Blog 3 of a structured series going…
25 views
Daily Writeups
⤷ Title: Password Cracking | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #tryhackme #password_cracking
Medium
Password Cracking | TryHackMe
Learn how passwords are hashed, identify hash types, and crack them with Hashcat and John the Ripper.
37 views
Daily Writeups
⤷ Title: Web Server Attacks — II | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #tryhackme #web_server_attacks #cybersecurity #pentesting
Medium
Web Server Attacks — II | TryHackMe
Attack IIS through fingerprinting, tilde enumeration, WebDAV shell upload, and learn automation.
42 views
Daily Writeups
⤷ Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
⌗ Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
⤷ Title: The Diminishing Returns of AI: Corporate Leaders Question Skyrocketing Expenditures
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:19:58 +0000
════════════════════════
⌗ Tags: #Technology #agentic workflow infrastructure budget impact #Axios Claude AI $500 million bill #Claude Enterprise API limit configuration #cloud computing billing threshold governance #corporate tech investment ROI friction #corporate tokenmaxxing spending habits #Enterprise AI token spending #IT budget resource mismanagement metrics #Microsoft Claude Code contract cancellations #Uber AI token cost optimization
Information Security News
Enterprise AI Token Spending Spirals: Inside the $500M Bill
An Axios report exposes soaring enterprise AI token spending, revealing how one company accidentally generated a massive $500 million Claude bill in a month.
28 views
Daily Writeups
⤷ Title: The Algorithmic Illusion: Threat Actors Weaponize Generative AI Shared Tunnels for Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
Information Security News
Shared AI Chat Malvertising: Fraudsters Weaponize ChatGPT & Claude
Hackers are deploying shared AI chat malvertising in Google Ads, exploiting trusted chatgpt.com and claude.ai links to infect users with malware.
21 views
Daily Writeups
⤷ Title: The Sabotage of Automation: Open-Source Project jqwik Poisoned Against AI Agents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:08:30 +0000
════════════════════════
⌗ Tags: #Technology #ANSI escape sequence terminal hiding #automated build log stream exploitation #Claude Code payload detection #indirect prompt injection software safety #Java testing dependencies boycott #jqwik hidden prompt injection #JUnit 5 platform alternative migration #Maven Central supply chain vulnerability #printMessageForCodingAgents source bytecode #protestware open source security risks
Information Security News
jqwik Hidden Prompt Injection Targets AI Coding Agents
Java testing library jqwik faces major developer backlash after version 1.10.0 deploys a hidden prompt injection payload aimed at tricking AI coding tools.
21 views
Daily Writeups
⤷ Title: Comet Backup Server Flaw Exposes Remote Customer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:56:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Comet Backup #CVE_2026_32999 #RCE vulnerability #Server Security #Software Patch
Daily CyberSecurity
Comet Backup Server Flaw Exposes Remote Customer Data
A critical Comet Backup RCE vulnerability has been found. Learn about the CVE-2026-32999 patch released to secure backup servers and user data.
21 views
Daily Writeups
⤷ Title: FIFA Website Spoofing Scams: FBI Issues Major World Cup Warning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:39:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber fraud #FBI alert #FIFA World Cup 2026 #Typosquatting #Website Spoofing
Daily CyberSecurity
FIFA Website Spoofing Scams: FBI Issues Major World Cup Warning
Bad actors are running FIFA website spoofing scams. Read the latest FBI World Cup alert to stay safe from fake ticket sites and data theft.
19 views
Daily Writeups
⤷ Title: Why Most Web3 Projects Launch Without Real User Testing (And Pay the Price)
════════════════════════
𐀪 Author: prooflabquest
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:59:59 GMT
════════════════════════
⌗ Tags: #software_testing #verified_testers #web3_dapp #app_testing_hub #bug_bounty
Medium
Why Most Web3 Projects Launch Without Real User Testing (And Pay the Price)
Every Web3 founder worries about smart contract security. Audits, bug bounties, and code reviews have become standard practice. Yet many…
26 views
Daily Writeups
⤷ Title: Re-Testing (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:39:53 GMT
════════════════════════
⌗ Tags: #pentester #tryhackme #hacking #red_team #cybersecurity
Medium
Re-Testing (THM) Tryhackme Walkthrough
Description : Verify vulnerability remediations, spot incomplete fixes, and produce re-test reports for auditors.
26 views
Daily Writeups
⤷ Title: How Did Bitdefender, a Romanian Cybersecurity Company, Become a Global Player Without Massive…
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:36:14 GMT
════════════════════════
⌗ Tags: #ai #antivirus #cybersecurity #hacking #artificial_intelligence
Medium
How Did Bitdefender, a Romanian Cybersecurity Company, Become a Global Player Without Massive Silicon Valley Investment?
The geopolitical and economic landscape of Eastern Europe in the late twentieth century served as an unexpected incubator for global…
34 views
Daily Writeups
⤷ Title: TryHackMe — Lookback Writeup
════════════════════════
𐀪 Author: Rootseekerx0x
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:27:15 GMT
════════════════════════
⌗ Tags: #tryhackme #penetration_testing #tryhackme_writeup #tryhackme_walkthrough #red_team
Medium
TryHackMe — Lookback Writeup
Difficulty: Easy Room: https://tryhackme.com/room/lookback Category: Windows / Exchange / RCE / Privilege Escalation Tools Used: Nmap…
45 views
Daily Writeups
⤷ Title: Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sun, 31 May 2026 17:52:12 +0530
════════════════════════
⌗ Tags: No_Tags
36 views